Skip to main content

North Korean hackers are using almost 500 phishing domains to steal NFTs.

North Korean hackers are using almost 500 phishing domains to steal NFTs.

The hackers made fake websites that looked like NFT projects, NFT marketplaces, and even a DeFi platform.

Hackers with ties to North Korea's Lazarus Group are said to be behind a massive phishing campaign that targets investors in nonfungible tokens (NFTs). The campaign uses nearly 500 phishing domains to trick people into giving away their personal information.

SlowMist, a blockchain security company, released a report on December 24 that showed the methods that North Korean Advanced Persistent Threat (APT) groups have used to trick NFT investors out of their NFTs. These methods include putting up fake websites that look like different platforms and projects related to NFTs.

Some of these fake websites include one that pretends to be a World Cup project and others that try to look like popular NFT marketplaces like OpenSea, X2Y2, and Rarible.

SlowMist said that one of the methods was for these fake websites to offer "malicious mints," which trick the victims into thinking that they are minting a real NFT when they connect their wallet to the website.

But the NFT is a fake, and the hacker now has access to the victim's wallet, which leaves the wallet open to theft.

The report also showed that many of the phishing websites used the same Internet Protocol (IP). For example, 372 NFT phishing websites were linked to a single IP, and 320 NFT phishing websites were linked to a different IP.

SlowMist said that the phishing campaign has been going on for a while, pointing out that the first domain name was registered about seven months ago.

Other ways that phishing was done were by recording visitor information and saving it on external sites and by linking images to projects that were being hacked.

.net/YwotbKdP4sVunJGfdhmgww/e8f260a6-84bf-4222-a093-e1ef14e44c00/

After the hacker was about to get the visitor's information, they would run different attack scripts on the victim. This gave the hacker access to the victim's access records, authorizations, and use of plug-in wallets, as well as sensitive information like the victim's approve record and sigData.

After getting all of this information, the hacker can get into the victim's wallet and see all of their digital assets.

But SlowMist stressed that this is just the "tip of the iceberg" because the analysis only looked at a small part of the materials and only got "some" of the North Korean hackers' phishing traits.

For example, SlowMist pointed out that just one of its phishing addresses was able to get 1,055 NFTs and 300 Ether, which is worth $367,000.

It also said that the same North Korean APT group was behind the Naver phishing campaign that Prevailion had written about on March 15.

In 2022, North Korea has been at the center of a number of thefts of cryptocurrency.

South Korea's National Intelligence Service (NIS) said in a report that came out on December 22 that North Korea stole $620 million worth of cryptocurrencies this year alone.

In October, Japan's National Police Agency warned the country's crypto-asset businesses about the North Korean hacking group and told them to be careful.

Comments

Popular posts from this blog

Proof has raised $50 million in its Series A funding round, which was led by A16z.

Proof has shown that it has successfully closed a $50 million Series A round of funding led by Andreessen Horowitz. Proof's $50 million fundraising round, which was led by Andreessen Horowitz, has come to a successful end (a16z). During the funding process, there was also help from Seven Seven Six, True Ventures, Collab+Currency, Flamingo DAO, SV Angel, and VaynerFund. In April, Seven Seven Six put $10 million into PROOF. The company also talked about the technology that runs its Web3 platform and how it plans to grow the whole ecosystem. The company is now working on making a platform that will help NFT collectors work with communities and unlock utilities. Kevin Rose, co-founder and CEO of Proof, made the announcement, along with co-founder and Chief Product Officer Justin Mezell and Director of Product Harri Thomas. Getting money during a live-streamed event for the community. Kevin Rose said this about the fundraising: "It's great to have this vote of confidence from s...

After major averages extended their losses to start the week, stock futures continued their downward trend.

The stock market futures went in the opposite direction on Tuesday morning, falling after the Bank of Japan indicated that it will increase the yield target range. The Dow Jones Industrial Average futures market experienced a loss of 236 points, or 0.72 percent. Futures contracts for the S&P 500 and the Nasdaq 100 both had a decline of 1.05% and 0.86%, respectively. On Monday, ordinary trading on the Dow Jones Industrial Average resulted in a loss of more than 162 points, or around 0.5%. The S&P 500 had a loss of 0.9%, while the Nasdaq Composite dropped almost 1.5%. The stock market is currently on track to finish the month and the year with a loss, and investors' expectations for a Santa Claus surge are rapidly diminishing. There has been no sign of Santa Claus as of yet. Louis Navellier, the founder of the growth investing firm Navellier & Associates, once advised his clients to "buckle up." "One would want to think that all of the bad news has been rep...

Following reports of a block sale, Max Financial shares decline 3%.

Today, shares of Max Financial Services plummeted roughly 3% on news that more than 2% of the company's stock was traded in a block transaction. The acquisition was valued at 471 billion dollars. On the BSE, Max Financial shares declined 2.75 percent to 680.15 rupees from their previous closing of 699.45 rupees. The firm's market cap plummeted to Rs 23,863.2 billion. Previously, the stock opened at Rs 687.50, a decrease. Max Financial shares are trading below their 5-, 20-, 50-, 100-, and 200-day moving averages. The share price of Max Financial has declined by 28.38 percent during the past year and by 29.31 percent in 2022. The stock's 52-week high was Rs 1081 on January 11, 2022, while its 52-week low was Rs 627.80 on November 23, 2022. On the BSE, a total of 12,577,000 shares of the company were traded for a volume of Rs 85.89 crore. In the last two trading sessions, Max Financial shares have declined. Meanwhile, Emkay Global has a Rs 930 price target on Max Financial sh...