Impersonators are (still) targeting companies with fake TechCrunch outreach

TechCrunch would like to alert its readers about a troubling trend involving scammers who are impersonating its reporters and event coordinators. These fraudsters are reaching out to companies while falsely claiming to be associated with the reputable news outlet. This deceptive practice is increasingly common and serves to exploit the trust that businesses place in established media brands. Recently, there has been a noticeable uptick in inquiries from businesses questioning the legitimacy of individuals claiming to represent TechCrunch. This issue highlights a broader problem, as various sectors within the media industry are also experiencing similar impersonation attempts. One prevalent scheme involves scammers adopting the identities of actual TechCrunch staff members. They craft seemingly standard media inquiries about company products, often requesting introductory calls. While some recipients manage to spot inconsistencies in email addresses, others may fall victim to the sophisticated tactics of these impersonators, who are honing their methods to appear more convincing by mimicking journalist writing styles and referencing current startup trends. In some troubling instances, victims who engage in phone interviews with these fraudsters report that the scammers use these conversations to pry for sensitive business information. For example, a public relations representative shared concerns about an individual posing as a TechCrunch reporter who raised suspicions by providing a suspicious scheduling link. Although the exact motivations behind these impersonation efforts remain unclear, experts suggest that these groups are likely seeking initial access to confidential networks or proprietary information. Former colleagues from Yahoo have tracked similar threats, revealing a pattern of impersonation aimed at facilitating account takeovers and data theft, particularly targeting sectors like cryptocurrency and cloud technology. To protect against these impersonation attempts, TechCrunch encourages any recipients of suspicious inquiries to verify the legitimacy of the sender. A quick check on the TechCrunch staff page can confirm whether the person contacting you is a legitimate employee. If the individual’s name is not listed, it’s a clear sign of a scam. Similarly, if a staff member's role does not align with the nature of the request, further verification is advisable. Readers are urged to remain vigilant and confirm the authenticity of media inquiries. By taking these precautions, businesses not only safeguard their own interests but also contribute to the integrity of journalism as a whole. Below is a list of domains that have been used in recent impersonation attempts, which serve as a cautionary note for those in the industry: email-techcrunch[.]com, hr-techcrunch[.]com, interview-techcrunch[.]com, and several others. Thank you for your attention to this matter.