Disclaimer: The analyst who wrote this article has shares in Strategy (MSTR)

Strategy’s (MSTR) perpetual preferred shares may be anticipating the bitcoin-accumulation company’s inclusion in the S&P 500 index after the largest cryptocurrency posted a record-high monthly close at a price some analysts calculate lifted quarterly earnings to a level that qualifies it for the U.S. equity benchmark.

That may not be the only reason for their popularity, however. The stocks all offer yields above the Federal Reserve’s target rate of 4.25%-4.5% at levels that may be enough to attract investor interest, especially given President Donald Trump’s calls for U.S. interest rates to be lowered.

While the official announcement regarding S&P 500 inclusion is not due until September. Still, on Monday, MSTR rose 5%, pushing the stock above $400, its highest since May 22. More notable gains came from the perpetual preferred shares, STRK, which climbed 15% and STRF, which added 7.5%. The STRD shares rose 3%.

Bitcoin

ended June at $107,750, a level that translates into a positive earnings impact of about $11 billion for Tyson Corner, Virgina-based Strategy, and boosts earnings per share to around $39.50, according to MSTR analyst Jeff Walton. That’s enough for it to post a net positive figure from the most recent four quarters, the last barrier it faced to be added to the S&P 500.

Shares often rise when they join, or are expected to join, the benchmark because membership opens up greater demand from institutions who are not allowed to invest in companies that haven’t made the cut.

STRK’s advance pushed the price to $121 with an effective yield of 6.6%. Since its Feb. 6 launch, STRK has delivered a 42% return, outperforming both bitcoin’s 11% jump and the S&P 500’s 2%. The figures exclude dividend payments associated with these products. STRF now offers an effective yield of 8.8% and STRD 11.1%.

Altogether, these developments raise the question of whether recent market moves represent front running ahead of a possible inclusion of MSTR in the S&P 500 alone.

Read more: Strategy Could Be Eligible for S&P 500 Inclusion in June if Bitcoin Closes Q1 Above $96K

Cointelegraph, one of the leading crypto media platforms, has confirmed a front-end security breach that exposed its users to a malicious pop-up urging them to connect their wallets.

The incident, which occurred on June 22, involved scammers promoting a fake Cointelegraph token (CTG) and a counterfeit initial coin offering (ICO) campaign.

Scam Sniffer, a blockchain security platform, first flagged the compromise, noting that the attackers aimed to deceive users into granting wallet access. Once connected, these wallets could be drained of assets.

Scam Sniffer traced the exploit to a JavaScript payload embedded via the site’s advertising infrastructure. The code appeared to come from a domain resembling AdButler, though it had been recently registered and linked to a malicious script hidden within a banner advertisement.

In a public statement, Cointelegraph acknowledged the issue and warned users not to interact with pop-ups promoting “CTG tokens” or “CoinTelegraph ICO airdrops.”

The platform emphasized that it is actively investigating and working to remove the malicious code. Users were advised not to enter personal details or connect wallets to any prompts on the site.

CoinMarketCap faced similar exploits

This incident follows a similar attack on CoinMarketCap just two days prior.

On June 20, the crypto data provider briefly experienced a front-end breach that resulted in a fake wallet prompt appearing on its homepage.

CoinMarketCap traced the vulnerability to a doodle image linked to unauthorized JavaScript, which briefly disrupted the site’s interface. It noted:

“Our security team identified a vulnerability related to a doodle image displayed on our homepage. This doodle image contained a link that triggered malicious code through an API call, resulting in an unexpected pop-up for some users when visited our homepage.”

While the message on each site differed, both cases followed a near-identical delivery mechanism: a deceptive pop-up disguised as a platform feature. This may indicate a coordinated campaign targeting high-traffic crypto websites using ad-based JavaScript exploits.

Security experts pointed out that the twin breaches highlight a growing trend of attackers exploiting trusted platforms to execute wallet-draining schemes. As a result, they urged crypto users to remain cautious, avoid interacting with unknown dApps, and regularly monitor wallet activity to stay safe.

Mentioned in this article