Tornado Cash phishing attack via expired domain steals 1,010 ETH

A user lost 1,010 ETH in 12 hours in a phishing attack involving Tornado Cash’s expired official domain, Wu Blockchain reported. The victim was said to have clicked an old bookmarked link and been redirected to a fake site on the tornado.cash domain, which the hacker had obtained. The Tornado Cash team had earlier been unable to renew the domain after sanctions by the U.S. Treasury’s Office of Foreign Assets Control, according to the report. The hacker was said to have registered the domain and built a fake front end, or user interface. Most of the stolen funds are still being held in the hacker’s address, and the group is estimated to have stolen about 4,000 ETH over the past 12 months using similar methods.