FYI: Impersonators are (still) targeting companies with fake TechCrunch outreach

In recent weeks, a concerning trend has emerged where scammers are posing as employees of TechCrunch, reaching out to companies under false pretenses. These fraudulent impersonations involve tactics that exploit the credibility of the publication, aiming to extract sensitive information from unsuspecting businesses. The increase in reports from companies questioning the legitimacy of these communications indicates that this issue is becoming more prevalent. Scammers have been known to impersonate actual TechCrunch staff members, sending out what appear to be routine media inquiries while requesting introductory meetings. Recipients are often vigilant, spotting inconsistencies in email addresses that don't correspond to verified TechCrunch staff. However, the situation has become more complex as fraudsters now mimic official email conventions, making it harder to distinguish between real and fake outreach. These deceptive operations have evolved, with impersonators refining their strategies to adopt the writing styles and interests of TechCrunch reporters, further enhancing their credibility. Alarmingly, those who engage in conversations with these impostors often find themselves divulging proprietary information during supposed interviews. One PR representative highlighted a recent incident where a scammer raised suspicions by sharing a scheduling link, indicating the lengths to which these impersonators will go. While the motivations behind these scams remain unclear, they seem to be linked to broader cyber threats. Reports suggest that these groups are looking for initial access to networks or sensitive data. Former Yahoo employees have noted that these impersonation attempts align with ongoing threats that target technology companies, particularly in sectors like cryptocurrency and cloud services. To safeguard your business, it’s crucial to verify any outreach claiming to be from TechCrunch. If you receive a suspicious email, consult the official TechCrunch staff page to confirm whether the individual is listed. Should you find a name on the roster but feel that the request is out of character for the role, it’s wise to proceed with caution. Directly contacting the person through verified communication channels listed in their bios is also recommended for added security. Although it may be inconvenient to double-check these inquiries, being diligent protects not only your company but also the integrity of journalism. The following is a list of domains that have been identified as impersonating TechCrunch, which are not affiliated with the publication: email-techcrunch[.]com, hr-techcrunch[.]com, interview-techcrunch[.]com, and several others. Stay informed and vigilant to avoid falling victim to these schemes.