Back Gbhackers

MetaMask Users Targeted by Phishing Emails with Fake Security Report to Bypass Detection

Gbhackers •Mayura Kathir • February 18, 2026

A new phishing campaign is targeting MetaMask users with cleverly crafted emails designed to trick recipients into enabling a fake Two-Factor Authentication (2FA) setup. The lure includes a forged “security report” PDF meant to mimic a legitimate notification unusual login activity, adding credibility and emotional urgency to the scam. The attack blends social engineering […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Exploits Fake Security Incident Report Targeting Crypto Users A phishing campaign has been identified that uses a fake PDF security incident report hosted on AWS to trick victims into enabling two-factor authentication (2FA). The campaign specifically targets Metamask users, a popular crypto wallet, and has been described as poorly crafted. Freelance security consultant Xavier Mertens reported the incident, highlighting the tactics used by the attackers. 5 sources 24

Extracted Entities

MetaMask Users Targeted by Phishing Emails with Fake Security Report to Bypass Detection

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Platforms (1)