{"id":19635,"date":"2022-03-01T18:49:54","date_gmt":"2022-03-01T17:49:54","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=19635"},"modified":"2022-03-01T18:49:54","modified_gmt":"2022-03-01T17:49:54","slug":"metaverse-users-are-now-being-targeted-by-a-sophisticated-phishing-attack-using-metamask","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/metaverse-users-are-now-being-targeted-by-a-sophisticated-phishing-attack-using-metamask\/","title":{"rendered":"Metaverse users are now being targeted by a sophisticated phishing attack using MetaMask."},"content":{"rendered":"\n
A\u00a0sophisticated\u00a0phishing\u00a0attempt\u00a0targeting\u00a0crypto\u00a0and\u00a0metaverse\u00a0users\u00a0utilizing\u00a0non-custodial\u00a0wallets\u00a0like\u00a0MetaMask<\/a>\u00a0has\u00a0been\u00a0discovered\u00a0by\u00a0Guardio,\u00a0a\u00a0cyber\u00a0security\u00a0business.<\/h5>\n\n\n\n
\"Metaverse<\/figure><\/div>\n\n\n\n

Phishing\u00a0campaigns\u00a0are\u00a0being\u00a0ramped\u00a0up\u00a0by\u00a0attackers.<\/strong><\/h4>\n\n\n\n

The\u00a0Guardio\u00a0research\u00a0team\u00a0noted\u00a0in\u00a0a\u00a0recent\u00a0blog\u00a0post\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a>\u00a0that\u00a0the\u00a0illicit\u00a0operation\u00a0is\u00a0operating\u00a0at\u00a0full\u00a0throttle\u00a0in\u00a0terms\u00a0of\u00a0breadth\u00a0and\u00a0depth.\u00a0Hackers\u00a0were\u00a0using\u00a0time-tested\u00a0web\u00a0infiltration\u00a0tactics\u00a0like\u00a0domain\u00a0typo-squatting\u00a0techniques\u00a0accelerated\u00a0by\u00a0malvertising\u00a0campaigns\u00a0where\u00a0victims\u00a0unknowingly\u00a0approve\u00a0payment\u00a0to\u00a0attackers\u00a0via\u00a0cloned\u00a0websites\u00a0of\u00a0leading\u00a0NFT\u00a0and\u00a0metaverse\u00a0brands\u00a0like\u00a0OpenSea\u00a0and\u00a0others,\u00a0according\u00a0to\u00a0the\u00a0cybersecurity\u00a0startup.<\/p>\n\n\n\n

These NFT and metaverse websites typically provide a high level of functionality and employ a complicated network of wallet connections, relying mostly on non-custodial wallets, the most popular of which is MetaMask. Cloned and malicious websites are ranked on the first page of search results using black hat SEO and aggressive promotion through paid Google AdWords, resulting in thousands of victims.<\/p>\n\n\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

It's\u00a0worth\u00a0noting\u00a0that\u00a0the\u00a0Guardio\u00a0claims\u00a0that\u00a0these\u00a0cloned\u00a0websites,\u00a0which\u00a0number\u00a0in\u00a0the\u00a0thousands,\u00a0are\u00a0“flying\u00a0under\u00a0the\u00a0radar”\u00a0and\u00a0are\u00a0undetectable\u00a0by\u00a0in-built\u00a0browser\u00a0protection\u00a0mechanisms\u00a0or\u00a0traditional\u00a0antivirus\u00a0software.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n
\u00a0What\u00a0is\u00a0the\u00a0difference\u00a0between\u00a0MetaMask\u00a0and\u00a0Metaverse?<\/strong><\/h5>\n\n\n\n

According to the Guardio research team, attackers have amassed tens of thousands, if not hundreds of thousands, of money from vulnerable victims, significantly hurting the user experience and thereby giving the crypto and metaverse scene a poor rap.<\/p>\n\n\n\n

Blockchain guarantees complete autonomy and control. These are the guidelines that deployment agents and infrastructure providers follow. For example, the MetaMask non-custodial wallet is simple to use and allows users to store ETH, ERC-20, and other EVM-compatible tokens. Over ten million users are reported to have used the wallet to access multiple NFT, Metaverse, and DeFi portals in Ethereum, the Binance Smart Chain (BSC), Harmony, and other EVM-compatible networks.<\/p>\n\n\n\n

DeFi, NFT, and the Metaverse have all grown in popularity in recent years, commanding billions of dollars. All DeFi dApps had a total value of nearly $208 billion at the time of writing. NFT trading volumes, on the other hand, rose to much than $5 billion in January 2022 alone, extending their impressive numbers from 2021. The overall amount of NFT trading increased to almost $25 billion last year. Meanwhile, the Metaverse is gaining traction, despite the fact that it has been receiving attention since Q3 2021. The Metaverse, according to predictions, will be revolutionary, completely revamping the internet. Analysts predict that the Metaverse's value will exceed $1 trillion in the next decade.<\/p>\n\n\n\n

Emphasis\u00a0on\u00a0the\u00a0Metaverse\u00a0and\u00a0Cryptocurrency\u00a0Users<\/strong><\/h4>\n\n\n\n

Because most Metaverse, DeFi, and NFT users are tech-savvy and crypto holders, attackers appear to be specifically targeting them. Attackers are cloning and distributing a near-pixel copy of the original site, catching some users off guard. They are aware that users are also on the alert to avoid getting hacked and losing valuable assets.<\/p>\n\n\n\n

Because\u00a0blockchain\u00a0solutions\u00a0are\u00a0noncustodial,\u00a0the\u00a0controller\u00a0of\u00a0the\u00a0wallet's\u00a0private\u00a0keys\u00a0must\u00a0first\u00a0validate\u00a0the\u00a0transaction\u00a0before\u00a0it\u00a0can\u00a0be\u00a0irreversibly\u00a0confirmed\u00a0on\u00a0the\u00a0network.\u00a0As\u00a0a\u00a0result,\u00a0by\u00a0publishing\u00a0a\u00a0flawless\u00a0front-end,\u00a0attackers\u00a0may\u00a0concentrate\u00a0on\u00a0exploiting\u00a0end-user\u00a0approval,\u00a0which\u00a0is\u00a0arguably\u00a0the\u00a0only\u00a0weakness\u00a0in\u00a0blockchain\u00a0metaverse\u00a0and\u00a0NFT\u00a0sites.\u00a0Hackers\u00a0have\u00a0also\u00a0successfully\u00a0extracted\u00a0private\u00a0keys,\u00a0which\u00a0are\u00a0passphrases\u00a0required\u00a0for\u00a0transaction\u00a0confirmation,\u00a0according\u00a0to\u00a0Guardio\u00a0analysts.<\/p>\n\n\n\n

How\u00a0to\u00a0Stay\u00a0Safe\u00a0in\u00a0Crypto<\/strong><\/h4>\n\n\n\n

Crypto\u00a0developments\u00a0such\u00a0as\u00a0the\u00a0Metaverse\u00a0and\u00a0NFT<\/a>s\u00a0are\u00a0intriguing,\u00a0but\u00a0they\u00a0are\u00a0still\u00a0in\u00a0their\u00a0infancy.\u00a0Attackers\u00a0are\u00a0on\u00a0the\u00a0hunt,\u00a0waiting\u00a0to\u00a0extort\u00a0cash\u00a0and\u00a0private\u00a0keys\u00a0from\u00a0unsuspecting\u00a0victims\u00a0at\u00a0any\u00a0time.\u00a0Due\u00a0diligence\u00a0is\u00a0required\u00a0to\u00a0stay\u00a0safe.\u00a0As\u00a0the\u00a0first\u00a0line\u00a0of\u00a0defense,\u00a0always\u00a0use\u00a0a\u00a0reliable\u00a0antivirus\u00a0product.<\/p>\n\n\n\n

As a general guideline, never disclose the private keys to your wallet with anyone, no matter how convincing they seem. Users should also double-check that they are accessing the correct website and not a clone with obvious mistakes.<\/p>\n","protected":false},"excerpt":{"rendered":"

A\u00a0sophisticated\u00a0phishing\u00a0attempt\u00a0targeting\u00a0crypto\u00a0and\u00a0metaverse\u00a0users\u00a0utilizing\u00a0non-custodial\u00a0wallets\u00a0like\u00a0MetaMask\u00a0has\u00a0been\u00a0discovered\u00a0by\u00a0Guardio,\u00a0a\u00a0cyber\u00a0security\u00a0business. Phishing\u00a0campaigns\u00a0are\u00a0being\u00a0ramped\u00a0up\u00a0by\u00a0attackers. The\u00a0Guardio\u00a0research\u00a0team\u00a0noted\u00a0in\u00a0a\u00a0recent\u00a0blog\u00a0post \u00a0that\u00a0the\u00a0illicit\u00a0operation\u00a0is\u00a0operating\u00a0at\u00a0full\u00a0throttle\u00a0in\u00a0terms\u00a0of\u00a0breadth\u00a0and\u00a0depth.\u00a0Hackers\u00a0were\u00a0using\u00a0time-tested\u00a0web\u00a0infiltration\u00a0tactics\u00a0like\u00a0domain\u00a0typo-squatting\u00a0techniques\u00a0accelerated\u00a0by\u00a0malvertising\u00a0campaigns\u00a0where\u00a0victims\u00a0unknowingly\u00a0approve\u00a0payment\u00a0to\u00a0attackers\u00a0via\u00a0cloned\u00a0websites\u00a0of\u00a0leading\u00a0NFT\u00a0and\u00a0metaverse\u00a0brands\u00a0like\u00a0OpenSea\u00a0and\u00a0others,\u00a0according\u00a0to\u00a0the\u00a0cybersecurity\u00a0startup. These NFT and metaverse websites typically provide a high level of functionality and employ a complicated network of wallet connections, relying mostly on non-custodial wallets, the most popular of which is MetaMask. Cloned and malicious websites are ranked on the first page of search results using black hat SEO and aggressive promotion through paid Google AdWords, resulting in thousands of victims. It’s\u00a0worth\u00a0noting\u00a0that\u00a0the\u00a0Guardio\u00a0claims\u00a0that\u00a0these\u00a0cloned\u00a0websites,\u00a0which\u00a0number\u00a0in\u00a0the\u00a0thousands,\u00a0are\u00a0“flying\u00a0under\u00a0the\u00a0radar”\u00a0and\u00a0are\u00a0undetectable\u00a0by\u00a0in-built\u00a0browser\u00a0protection\u00a0mechanisms\u00a0or\u00a0traditional\u00a0antivirus\u00a0software. \u00a0What\u00a0is\u00a0the\u00a0difference\u00a0between\u00a0MetaMask\u00a0and\u00a0Metaverse? According to the Guardio research team, attackers have amassed tens of thousands, if not hundreds of thousands, of money from vulnerable victims, significantly hurting the user experience and thereby giving the crypto and metaverse scene a poor rap. Blockchain guarantees complete autonomy and control. These are the guidelines that deployment agents and infrastructure providers follow. For example, the MetaMask non-custodial wallet is simple to use and allows users to store ETH, ERC-20, and other EVM-compatible tokens. Over ten million users are reported to have used the wallet to access multiple NFT, Metaverse, and DeFi portals in Ethereum, the Binance Smart Chain (BSC), Harmony, and other EVM-compatible networks. DeFi, NFT, and the Metaverse have all grown in popularity in recent years, commanding billions of dollars. All DeFi dApps had a total value of nearly $208 billion at the time of writing. NFT trading volumes, on the other hand, rose to much than $5 billion in January 2022 alone, extending their impressive numbers from 2021. The overall amount of NFT trading increased to almost $25 billion last year. Meanwhile, the Metaverse is gaining traction, despite the fact that it has been receiving attention since Q3 2021. The Metaverse, according to predictions, will be revolutionary, completely revamping the internet. Analysts predict that the Metaverse’s value will exceed $1 trillion in the next decade. Emphasis\u00a0on\u00a0the\u00a0Metaverse\u00a0and\u00a0Cryptocurrency\u00a0Users Because most Metaverse, DeFi, and NFT users are tech-savvy and crypto holders, attackers appear to be specifically targeting them. Attackers are cloning and distributing a near-pixel copy of the original site, catching some users off guard. They are aware that users are also on the alert to avoid getting hacked and losing valuable assets. Because\u00a0blockchain\u00a0solutions\u00a0are\u00a0noncustodial,\u00a0the\u00a0controller\u00a0of\u00a0the\u00a0wallet’s\u00a0private\u00a0keys\u00a0must\u00a0first\u00a0validate\u00a0the\u00a0transaction\u00a0before\u00a0it\u00a0can\u00a0be\u00a0irreversibly\u00a0confirmed\u00a0on\u00a0the\u00a0network.\u00a0As\u00a0a\u00a0result,\u00a0by\u00a0publishing\u00a0a\u00a0flawless\u00a0front-end,\u00a0attackers\u00a0may\u00a0concentrate\u00a0on\u00a0exploiting\u00a0end-user\u00a0approval,\u00a0which\u00a0is\u00a0arguably\u00a0the\u00a0only\u00a0weakness\u00a0in\u00a0blockchain\u00a0metaverse\u00a0and\u00a0NFT\u00a0sites.\u00a0Hackers\u00a0have\u00a0also\u00a0successfully\u00a0extracted\u00a0private\u00a0keys,\u00a0which\u00a0are\u00a0passphrases\u00a0required\u00a0for\u00a0transaction\u00a0confirmation,\u00a0according\u00a0to\u00a0Guardio\u00a0analysts. How\u00a0to\u00a0Stay\u00a0Safe\u00a0in\u00a0Crypto Crypto\u00a0developments\u00a0such\u00a0as\u00a0the\u00a0Metaverse\u00a0and\u00a0NFTs\u00a0are\u00a0intriguing,\u00a0but\u00a0they\u00a0are\u00a0still\u00a0in\u00a0their\u00a0infancy.\u00a0Attackers\u00a0are\u00a0on\u00a0the\u00a0hunt,\u00a0waiting\u00a0to\u00a0extort\u00a0cash\u00a0and\u00a0private\u00a0keys\u00a0from\u00a0unsuspecting\u00a0victims\u00a0at\u00a0any\u00a0time.\u00a0Due\u00a0diligence\u00a0is\u00a0required\u00a0to\u00a0stay\u00a0safe.\u00a0As\u00a0the\u00a0first\u00a0line\u00a0of\u00a0defense,\u00a0always\u00a0use\u00a0a\u00a0reliable\u00a0antivirus\u00a0product. As a general guideline, never disclose the private keys to your wallet with anyone, no matter how convincing they seem. Users should also double-check that they are accessing the correct website and not a clone with obvious mistakes.<\/p>\n","protected":false},"author":32,"featured_media":19645,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[26,5794,21],"tags":[132,7748,4617],"class_list":["post-19635","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrencies","category-metaverse-news","category-news","tag-crypto","tag-matamask","tag-metaverse"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/metamask-1.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/19635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=19635"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/19635\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/19645"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=19635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=19635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=19635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}