North Korean hackers are using almost 500 phishing domains to steal NFTs.

The hackers made fake websites that looked like NFT projects, NFT marketplaces, and even a DeFi platform.

Hackers with ties to North Korea's Lazarus Group are said to be behind a massive phishing campaign that targets investors in nonfungible tokens (NFTs). The campaign uses nearly 500 phishing domains to trick people into giving away their personal information.

SlowMist, a blockchain security company, released a report on December 24 that showed the methods that North Korean Advanced Persistent Threat (APT) groups have used to trick NFT investors out of their NFTs. These methods include putting up fake websites that look like different platforms and projects related to NFTs.

Some of these fake websites include one that pretends to be a World Cup project and others that try to look like popular NFT marketplaces like OpenSea, X2Y2, and Rarible.

SlowMist said that one of the methods was for these fake websites to offer "malicious mints," which trick the victims into thinking that they are minting a real NFT when they connect their wallet to the website.

But the NFT is a fake, and the hacker now has access to the victim's wallet, which leaves the wallet open to theft.

The report also showed that many of the phishing websites used the same Internet Protocol (IP). For example, 372 NFT phishing websites were linked to a single IP, and 320 NFT phishing websites were linked to a different IP.

SlowMist said that the phishing campaign has been going on for a while, pointing out that the first domain name was registered about seven months ago.

Other ways that phishing was done were by recording visitor information and saving it on external sites and by linking images to projects that were being hacked.

After the hacker was about to get the visitor's information, they would run different attack scripts on the victim. This gave the hacker access to the victim's access records, authorizations, and use of plug-in wallets, as well as sensitive information like the victim's approve record and sigData.

After getting all of this information, the hacker can get into the victim's wallet and see all of their digital assets.

But SlowMist stressed that this is just the "tip of the iceberg" because the analysis only looked at a small part of the materials and only got "some" of the North Korean hackers' phishing traits.

For example, SlowMist pointed out that just one of its phishing addresses was able to get 1,055 NFTs and 300 Ether, which is worth $367,000.

It also said that the same North Korean APT group was behind the Naver phishing campaign that Prevailion had written about on March 15.

In 2022, North Korea has been at the center of a number of thefts of cryptocurrency.

South Korea's National Intelligence Service (NIS) said in a report that came out on December 22 that North Korea stole $620 million worth of cryptocurrencies this year alone.

In October, Japan's National Police Agency warned the country's crypto-asset businesses about the North Korean hacking group and told them to be careful.

Comments

Proof has raised $50 million in its Series A funding round, which was led by A16z.

Proof has shown that it has successfully closed a $50 million Series A round of funding led by Andreessen Horowitz. Proof's $50 million fundraising round, which was led by Andreessen Horowitz, has come to a successful end (a16z). During the funding process, there was also help from Seven Seven Six, True Ventures, Collab+Currency, Flamingo DAO, SV Angel, and VaynerFund. In April, Seven Seven Six put $10 million into PROOF. The company also talked about the technology that runs its Web3 platform and how it plans to grow the whole ecosystem. The company is now working on making a platform that will help NFT collectors work with communities and unlock utilities. Kevin Rose, co-founder and CEO of Proof, made the announcement, along with co-founder and Chief Product Officer Justin Mezell and Director of Product Harri Thomas. Getting money during a live-streamed event for the community. Kevin Rose said this about the fundraising: "It's great to have this vote of confidence from s...

Argentina's world cup coincides once more with a period of severe inflation.

As the Argentina team prepares for Sunday's World Cup final, Bloomberg reported that the country's annual inflation rate is expected to exceed 99.9% this month, and economists anticipate it will shortly surpass 100. Inflation averaged 116% in 1986, the year Diego Maradona led the Albiceleste to victory. According to central bank figures and surveys, the inflation rate in 1978, when Argentina won the tournament it hosted, was 176%. Lionel Messi, who was born a year after the 1986 triumph and is regarded by fans as the heir to Diego Maradona's legendary status, will make his final World Cup appearance against France on Sunday. Invigorated by their talisman, the team's run to the last match — from averting early elimination to racking up five consecutive victories — has thrilled a nation once again experiencing difficult economic times. However, this continuous economic characteristic of the country is not indicative of the country's World Cup performance. In 1990, hyp...

Explosions heard in the Ukrainian capital; deployment of emergency teams

Three explosions were heard in the center of Kiev as the Ukrainian government claimed to have shot down multiple Iranian-made Shahed drones. Mayor Vitali Klitschko reported that ten Shahed drones had been shot down by Ukraine's air defenses, and that emergency services had been deployed to the Shevchenkovskyi neighborhood in the city's center. "More information to come," he wrote on his Telegram channel. There was no way to independently confirm Klitschko's assertion. Ukrainian politician Oleksiy Goncharenko tweeted that he heard three explosions at 6:30 a.m. local time (04:30 GMT). The air-raid alert sounded at 5:55 a.m. (03:55 GMT), and inhabitants are advised to remain in shelters until further notice. "Ukrainians are not awakened by alarm clocks but by explosives," Goncharenko wrote. "Thanks to Russia, our neighbor! "Good morning, everyone!" Kyiv Oblast governor Oleksiy Kuleba stated that air defense systems were activated and "st...

Search This Blog