Here’s how a hacker stole $800,000 in NFTs through Discord

Controversial hacking has emerged as the latest threat to NFT buyers. A Discord server run by recently launched Rare Bears’ NFT project was hit by a phishing attack, resulting in the theft of approximately 179 NFTs worth $800,000.

According to blockchain security firm Peckshield, the attacker was able to steal NFTs including “Rare Bears” and other NFTs from various combinations including “CloneX,” “Azuki” and “mfer” from artist Sartoshi, and six LAND tokens used in Sandbox Metaverse. Here’s what happened.

On March 17th, a hacker gained illegal access to the account of Zhodan admin of Rare Bears Discord. The hacker immediately posted an announcement within the group informing him of a new version of NFT, followed by a phishing link. Once users click on the link, their NFTs are stolen.

For starters, NFTs are stored in something called a file crypto wallet. This wallet contains crypto and NFT tokens. Attackers are behind your encrypted wallet because once they have permission to it, they can lock your wallet forever and empty it.

Then the attacker blocked the other administrators in the group, removing their ability to post anything to the Discord server. In a post, NFT said hackers invited a fake bot “Collab.land” to automatically lock down all channel servers so that no one could report that posts in ads were fake. “Our team is working on a solution while we speak on behalf of those affected and will announce as soon as possible,” the company said in a tweet.

This is not the first time that hackers have targeted Discord servers to steal crypto assets. Earlier, NFT’s Fractal project was hacked, where 373 of its 800 members were scammed in Solana’s cryptocurrency, worth $150,000.

Most recently, NFT group pop culture icon Ozzy Osbourne Kryptopaz go live. CryptoBatz is a chain of 9,666 digital bats that opened for sale on January 20. Hours after its launch, Osborne’s supporters took to Twitter to complain about a phishing scam draining cryptocurrency from their wallets, after they clicked on a link shared by the project’s official Twitter account.

This link has been altered by the NFT project and taking advantage of it, the cybercriminal created a fake Discord server on the old URL. When followers clicked on the scam link, they were redirected to a fake Discord panel, asked to verify their crypto assets, which prompted them to link their crypto wallets. At least 1,330 people visited the fake NFT project.

.

[ad_2]

Related posts

Leave a Comment