# Web3 Phishing Doesn't Steal Passwords. It Steals Your Funds
5 min read
If you work in AppSec, Red Teaming, or SOC, your gut says protect credentials. But Web3 phishing skips passwords entirely and goes straight for your wallet approvals.
abida@root:~/portfolio$ cat about.md
// about.md
Abida Shariff
Lead Security Engineer | OSCP | CEH | eJPT
Lead Security Engineer at RedSentry with 6+ yrs of experience who loves breaking things. Works across web, mobile (Android/iOS), cloud, and internal infrastructure, approaching every engagement with an attacker’s curiosity and persistence. Active speaker and Chapter Lead at Null Bangalore, mentoring aspiring security professionals.