{"id":495,"date":"2025-06-21T12:57:30","date_gmt":"2025-06-21T12:57:30","guid":{"rendered":"https:\/\/www.coinspeaker.com\/fr\/?p=495"},"modified":"2025-06-21T13:32:02","modified_gmt":"2025-06-21T13:32:02","slug":"coinmarketcap-malware-vole-vos-cryptos","status":"publish","type":"post","link":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/","title":{"rendered":"CoinMarketCap : ce malware qui vole vos cryptos"},"content":{"rendered":"<h2>Une attaque front-end sophistiqu\u00e9e<\/h2>\n<blockquote class=\"twitter-tweet\" data-width=\"474\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">\ud83d\udea8 Security Alert<\/p>\n<p>We\u2019re aware that a malicious pop-up prompting users to &quot;Verify Wallet&quot; has appeared on our site.<\/p>\n<p>\u26a0\ufe0f Do NOT connect your wallet.<\/p>\n<p>Our team is actively investigating and working to resolve the issue.<\/p>\n<p>&mdash; CoinMarketCap (@CoinMarketCap) <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/twitter.com\/CoinMarketCap\/status\/1936197663931933117?ref_src=twsrc%5Etfw\">June 20, 2025<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>L\u2019alerte a \u00e9t\u00e9 donn\u00e9e sur X par CoinMarketCap, il y a quelques heures. Un pop-up <strong>frauduleux<\/strong> sur CoinMarketCap demandait aux utilisateurs de connecter leur wallet pour une pr\u00e9tendue v\u00e9rification. En r\u00e9alit\u00e9, ce malware ex\u00e9cutait des approbations ERC-20 pour drainer <strong>tous<\/strong> les fonds.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"474\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Update: We&#39;ve identified and removed the malicious code from our site. <\/p>\n<p>Our team is continuing to investigate and taking steps to strengthen our security.<\/p>\n<p>&mdash; CoinMarketCap (@CoinMarketCap) <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/twitter.com\/CoinMarketCap\/status\/1936237179732209798?ref_src=twsrc%5Etfw\">June 21, 2025<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Heureusement, la plateforme a su se montrer r\u00e9active. En effet, moins de trois heures plus tard, \u00e0 03 h 38, <a rel=\"noopener noreferrer\" href=\"https:\/\/coinmarketcap.com\/fr\/\" target=\"_blank\">CoinMarketCap<\/a> annon\u00e7ait avoir supprim\u00e9 le code malveillant.<\/p>\n<p>D\u2019apr\u00e8s Scam Sniffer, ce type d\u2019attaque, un wallet drainer, est courant, mais redoutable. En 2024, <strong>1,1<\/strong> <strong>milliard<\/strong> de dollars ont \u00e9t\u00e9 vol\u00e9s via des scams similaires. Par ailleurs, ce n\u2019est pas la premi\u00e8re m\u00e9saventure de CoinMarketCap. En effet, en 2021, un hack avait expos\u00e9 plus de <strong>3<\/strong> <strong>millions<\/strong> d\u2019emails utilisateurs.<\/p>\n<h2>Comment le malware vole vos cryptos<\/h2>\n<p>Les wallet drainers, comme celui utilis\u00e9 ici, sont des <strong>malwares<\/strong> con\u00e7us pour automatiser le vol d\u2019actifs crypto. D\u2019apr\u00e8s CoinMarketCap Academy, ils se d\u00e9clenchent lorsque l\u2019utilisateur interagit avec un site compromis. Cela arrive souvent via des pop-ups ou des liens phishing. Une fois le wallet connect\u00e9, le malware approuve des transferts vers les adresses des <strong>hackers<\/strong>.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"474\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Doodles \ud83c\udfa8 <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/t.co\/NuUqOuEv2f\">pic.twitter.com\/NuUqOuEv2f<\/a><\/p>\n<p>&mdash; CoinMarketCap (@CoinMarketCap) <a rel=\"noopener noreferrer\" target=\"_blank\" rel=\"noopener nofollow sponsored\" href=\"https:\/\/twitter.com\/CoinMarketCap\/status\/1936348409365201065?ref_src=twsrc%5Etfw\">June 21, 2025<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Dans ce cas, le pop-up mimait une interface l\u00e9gitime, trompant m\u00eame les utilisateurs aguerris. En 2023, des hackers ont ainsi cr\u00e9\u00e9 de faux sites de trading, volant des milliers de cl\u00e9s priv\u00e9es via des extensions de navigateur malveillantes. Ces attaques exploitent en fait des tactiques de social engineering en imitant des plateformes connues et <strong>r\u00e9put\u00e9es<\/strong> comme CMC.<\/p>\n<p>D\u2019ailleurs, CoinMarketCap n\u2019est pas du tout un cas isol\u00e9. En effet, en mai 2025, la plateforme BitMEX a d\u00e9jou\u00e9 un hack similaire qui provenait d&rsquo;un lien GitHub <strong>frauduleux<\/strong>. Des \u00e9v\u00e9nements qui rappellent bien s\u00fbr l\u2019importance de v\u00e9rifier chaque interaction en ligne. Heureusement, CoinMarketCap a rapidement restaur\u00e9 ses syst\u00e8mes, mais les pertes exactes restent encore inconnues.<\/p>\n<h2>Comment se prot\u00e9ger des wallet drainers<\/h2>\n<p>Dans l\u2019\u00e9cosyst\u00e8me <a href=\"https:\/\/www.coinspeaker.com\/fr\/guides\/meilleure-crypto\/\">crypto<\/a>, il faut vraiment rester de plus en plus vigilant. Voici trois actions pour s\u00e9curiser au mieux vos actifs <strong>num\u00e9riques<\/strong> :<\/p>\n<p>V\u00e9rifiez chaque connexion de votre wallet. En effet, ne connectez jamais votre portefeuille sur un site ou un pop-up douteux. Pr\u00e9f\u00e9rez des wallets tr\u00e8s bien s\u00e9curis\u00e9s comme Phantom. Ce wallet signale automatiquement les plateformes et les sites suspects.<\/p>\n<p>Vous devez utiliser le 2FA et les cold wallets. C&rsquo;est-\u00e0-dire, activez l\u2019authentification \u00e0 deux facteurs (2FA) et stockez vos cryptos sur des colds wallets comme <a rel=\"noopener noreferrer\" href=\"https:\/\/www.ledger.com\/\" target=\"_blank\">Ledger<\/a>. En 2024, <strong>80<\/strong> <strong>%<\/strong> des hacks visaient en effet des hot wallets. Avec un <strong>cold<\/strong> <strong>wallet<\/strong>, vous dormez plus tranquillement.<\/p>\n<p>Surveillez bien les extensions et liens sur lesquels vous cliquez. Vous devez d\u00e9sactiver JavaScript sur les sites louches et fuir les liens non officiels. D\u2019ailleurs, CoinMarketCap le disait d\u00e9j\u00e0 en <strong>2022<\/strong>, mais les r\u00e9cents incidents montrent que la vigilance reste cruciale. Enfin, checkez toujours les domaines (coinmarketcap.com, pas cdnkit[.]io). Suivez des comptes comme <a rel=\"noopener noreferrer\" href=\"https:\/\/x.com\/web3_antivirus\" target=\"_blank\">Web_3_antivirus<\/a> sur X pour des alertes en temps r\u00e9el. En crypto, la s\u00e9curit\u00e9 ne tol\u00e8re aucun <strong>rel\u00e2chement<\/strong>.<\/p>\n<a class=\"infinscroll_next_page_link\" style=\"display:none\" href=\"https:\/\/www.coinspeaker.com\/fr\/pump-fun-suspendu-bannissements-massifs-de-comptes-sur-x\/\" rel=\"prev\">next<\/a>","protected":false},"excerpt":{"rendered":"<p>Le march\u00e9 crypto n\u2019est jamais \u00e0 l\u2019abri des surprises. Ce vendredi 20 juin 2025, CoinMarketCap a \u00e9t\u00e9 frapp\u00e9 par une attaque front-end sans pr\u00e9c\u00e9dent. <\/p>\n<p>Un pop-up malveillant incitant \u00e0 \u00ab v\u00e9rifier son wallet \u00bb visait \u00e0 vider les portefeuilles des utilisateurs. D\u2019ailleurs, cette intrusion rappelle la fragilit\u00e9 des plateformes face aux hackers. Que s\u2019est-il pass\u00e9 et comment se prot\u00e9ger ? D\u00e9cryptage.<\/p>\n","protected":false},"author":220,"featured_media":503,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-495","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actu"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CoinMarketCap : ce malware qui vole vos cryptos<\/title>\n<meta name=\"description\" content=\"CoinMarketCap victime d\u2019un malware via un pop-up frauduleux. Comment ce scam vole vos cryptos ? Analyse d\u2019une attaque sournoise.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CoinMarketCap : ce malware qui vole vos cryptos\" \/>\n<meta property=\"og:description\" content=\"CoinMarketCap victime d\u2019un malware via un pop-up frauduleux. Comment ce scam vole vos cryptos ? Analyse d\u2019une attaque sournoise.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/\" \/>\n<meta property=\"og:site_name\" content=\"Coinspeaker France\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-21T12:57:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-21T13:32:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/Coinspeaker.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emmanuel Roux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Emmanuel Roux\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CoinMarketCap : ce malware qui vole vos cryptos","description":"CoinMarketCap victime d\u2019un malware via un pop-up frauduleux. Comment ce scam vole vos cryptos ? Analyse d\u2019une attaque sournoise.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/","og_locale":"fr_FR","og_type":"article","og_title":"CoinMarketCap : ce malware qui vole vos cryptos","og_description":"CoinMarketCap victime d\u2019un malware via un pop-up frauduleux. Comment ce scam vole vos cryptos ? Analyse d\u2019une attaque sournoise.","og_url":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/","og_site_name":"Coinspeaker France","article_published_time":"2025-06-21T12:57:30+00:00","article_modified_time":"2025-06-21T13:32:02+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/Coinspeaker.jpg","type":"image\/jpeg"}],"author":"Emmanuel Roux","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Emmanuel Roux","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/","url":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/","name":"CoinMarketCap : ce malware qui vole vos cryptos","isPartOf":{"@id":"https:\/\/www.coinspeaker.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/#primaryimage"},"image":{"@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/#primaryimage"},"thumbnailUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/Coinspeaker.jpg","datePublished":"2025-06-21T12:57:30+00:00","dateModified":"2025-06-21T13:32:02+00:00","author":{"@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/c07f2e89d7f6009cf9ffaeeb450c2119"},"description":"CoinMarketCap victime d\u2019un malware via un pop-up frauduleux. Comment ce scam vole vos cryptos ? Analyse d\u2019une attaque sournoise.","breadcrumb":{"@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/#primaryimage","url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/Coinspeaker.jpg","contentUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/Coinspeaker.jpg","width":1200,"height":800},{"@type":"BreadcrumbList","@id":"https:\/\/www.coinspeaker.com\/fr\/coinmarketcap-malware-vole-vos-cryptos\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.coinspeaker.com\/fr\/"},{"@type":"ListItem","position":2,"name":"CoinMarketCap : ce malware qui vole vos cryptos"}]},{"@type":"WebSite","@id":"https:\/\/www.coinspeaker.com\/fr\/#website","url":"https:\/\/www.coinspeaker.com\/fr\/","name":"Coinspeaker France","description":"Bitcoin, Ethereum, Altcoins et actualit\u00e9s crypto avec analyses, cours en direct, graphiques de donn\u00e9es et guides","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.coinspeaker.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/c07f2e89d7f6009cf9ffaeeb450c2119","name":"Emmanuel Roux","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.coinspeaker.com\/fr\/#\/schema\/person\/image\/","url":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/cropped-cropped-pp-1-96x96.png","contentUrl":"https:\/\/www.coinspeaker.com\/fr\/wp-content\/uploads\/sites\/6\/2025\/06\/cropped-cropped-pp-1-96x96.png","caption":"Emmanuel Roux"},"description":"Journaliste sp\u00e9cialis\u00e9 crypto et Web3, Emmanuel d\u00e9crypte l\u2019actualit\u00e9 des march\u00e9s, des projets blockchain et des grandes tendances du num\u00e9rique.","url":"https:\/\/www.coinspeaker.com\/fr\/author\/desireemeunier\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/users\/220"}],"replies":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/comments?post=495"}],"version-history":[{"count":3,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/495\/revisions"}],"predecessor-version":[{"id":532,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/posts\/495\/revisions\/532"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/media\/503"}],"wp:attachment":[{"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/media?parent=495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/categories?post=495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.coinspeaker.com\/fr\/wp-json\/wp\/v2\/tags?post=495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}