ChainCatcher 消息，据 Cointelegraph 报道，Robinhood 用户近期遭遇一轮钓鱼攻击。攻击者利用 Gmail 忽略邮箱用户名中 “.” 的特性，以及 Robinhood 账户创建流程中的漏洞，注册与目标邮箱高度相似的账户，并借此让 Robinhood 官方邮件服务器向受害者收件箱发送带有钓鱼链接的伪造提醒邮件。
网络安全研究员 Alex Eckelberry 表示，该邮件可通过 SPF、DKIM 和 DMARC 验证，看似来自官方地址。Robinhood 称，此事并非系统或客户账户遭入侵，用户资金和个人信息未受影响，但提醒用户删除相关邮件，勿点击可疑链接。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.