Hello, thank you for reading TechCrunch. I would like to quickly talk about something important.
A growing number of scammers are contacting companies pretending to be TechCrunch reporters or event managers, pretending to be our staff when they’re definitely not. These bad actors are using our name and reputation to defraud unsuspecting businesses. It drives us crazy and makes us furious on your behalf. There are high tides and high tides. More and more, I’m receiving emails asking, “Is this person really going to work for you?” Now it seems to be happening more actively.
Anecdotally, this isn’t just happening to us. Scammers are exploiting the trust that comes with established news brands to gain foothold in companies across the media industry.
Below are some examples of the most common schemes we have tracked. These are scammers who pretend to be our reporters and extract sensitive business information from unsuspecting targets. In several cases that we are aware of, scammers misrepresented the identities of actual staff members and requested introductory calls in what appeared to be standard media inquiries about a company’s products.
Astute recipients may notice mismatched email addresses that do not match the actual employee credentials (see list of fake email addresses below). But additional information is coming in from fake reporters claiming to have address rules that match ours, making it difficult to tell a TechCrunch employee from another person claiming to be a TechCrunch employee. In fact, this plan evolves rapidly. Malicious attackers continue to hone their tactics, copying reporters’ writing styles and following startup trends to make their pitches more persuasive. Equally troubling, victims interviewed over the phone say scammers use these interactions to mine even more sensitive information. A PR representative told Axios that suspicions arose when someone posing as a TechCrunch reporter shared a schedule link.
Why are they doing this? We don’t know, but a reasonable guess is that these are groups looking for initial access to networks or other sensitive information. In fact, former Yahoo colleagues say these efforts are consistent with the persistent threat actors they have been tracking that have historically been involved in impersonating TechCrunch to target crypto, cloud, and other tech companies using a variety of pretexts to facilitate account takeover (ATO) and data theft.
What to do: If someone contacts you claiming to be from TechCrunch and you have any doubts about their legitimacy, don’t just take their word for it. I made it easy to check.
First, check out TechCrunch’s staff page. It’s the easiest way to check if the person contacting you actually works here. Even if a person’s name is not on our directory, the answer is easy to find.
If you see someone’s name on our staff page, but their job description doesn’t match the request you receive (for example, TechCrunch’s copy editor suddenly wants to know more about your business!), someone with malicious intent may be trying to scam you.
Sounds like a legitimate request, but if you want to be sure, feel free to contact us directly and ask. In your profile, you can learn how to contact writers, editors, salespeople, marketing gurus, and event team members.
I know it’s frustrating to have to double check media inquiries, but these groups are counting on you not to take extra steps. By paying attention to verification, you not only protect your company, but also help maintain the trust that legitimate journalists rely on to do their jobs.
thank you. For future reference, here is a list of domains impersonating TechCrunch that have been created in the past few months.
Email-techcrunch(.)com
hr-techcrunch(.)com
Interview-techcrunch(.)com
mail-techcrunch(.)com
mediatechcrunch(.)com
No reply-tc-techcrunch(.)com
noreply-techcrunch(.)com
pr-techcrunch(.)com
techcrunch-outreach(.)com
techcrunch-startups(.) Information
techcrunch-team(.)com
Tech Crunch(.)ai
techcrunch(.)biz(.)id
Tech Crunch(.)bz
Tech Crunch(.)cc
Tech Crunch(.)ch
Tech Crunch(.)com(.)pl
Tech Crunch(.)gl
tech crunch(.)gs
techcrunch(.)id
Tech Crunch(.)it
tech crunch(.)ra
Tech Crunch(.)lt
techcrunch(.)net(.)cn
techcrunch1(.)com
