# blog.ethereum.org mailing list incident

DevFeed: [blog.ethereum.org mailing list incident](<https://devfeed.tech/articles/blog-ethereum-org-mailing-list-incident-17108.md>)

Original publisher: [Read original article](<https://blog.ethereum.org/en/2024/07/02/blog-incident>)

Author: EF Operational Security

Published: 2024-07-02T00:00:00Z

Content type: article

Language: en

Sources: [Ethereum Foundation Blog](<https://devfeed.tech/sources/ethereum-foundation-blog.md>)

Topics: [incident](<https://devfeed.tech/topics/incident.md>), [Security](<https://devfeed.tech/topics/security.md>), [Ethereum](<https://devfeed.tech/topics/ethereum.md>), [Website](<https://devfeed.tech/topics/website.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [crypto](<https://devfeed.tech/tags/crypto.md>), [email](<https://devfeed.tech/tags/email.md>), [ethereum-org](<https://devfeed.tech/tags/ethereum-org.md>), [incident](<https://devfeed.tech/tags/incident.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Ethereum.org reports that a phishing email sent to its blog mailing list directed recipients to a malicious website containing a crypto drainer. The organization blocked the attack path, notified users, and found no evidence that victims lost funds in this campaign.

## Source excerpt

On 2024-06-23, 00:19 AM UTC, a phishing email was sent out to 35,794 email addresses by updates@blog.ethereum.org with the following content Users who clicked the link in the email were sent to a malicious website: This website had a crypto drainer running in the background, and if...