NFT Hacks Via Discord Could Be Connected


50
90 shares, 50 points


Source: AdobeStock / Pixels Hunter

 

An analysis of recent hacks targeting non-fungible token (NFT) projects carried out through the social media platform Discord shows that many of them are part of a larger string of attacks, according to blockchain intelligence company TRM Labs.

Such attacks have rapidly risen over the past three months, and since May 2022, the NFT community has lost as much as USD 22m. 

Last June, phishing attacks related to NFT minting scams carried out via compromised Discord accounts rose by 55% compared with May 2022, the firm’s researchers said in a recent report. 

TRM Labs stated that one of the NFT project exploits that could be linked to other hacks is Yuga Labs, the company behind the Bored Ape Yacht Club (BAYC) collection.

“Yuga Labs’ Discord servers were hacked on June 4th when BorisVagner.ETH, Social Manager at Yuga Labs, had his verified Discord account compromised. While in control of the verified account, the hacker began to post promotional material to the account’s Discord community,” according to the report.

The company’s researchers said that a review of more than 15 “notable” Discord compromises targeting NFT servers and analysis of on-chain and off-chain data suggest that “dozens of these recent account compromises are likely related.”

 Furthermore, some of the linked compromises include well-known NFT Discord project accounts such as BAYC, Bubbleworld, Parallel, Lacoste, Tasties, Anata, and others, they stated.

Based on its findings, TRM Labs says that its analysis of on-chain and off-chain data indicates that many of the attacks through Discord that target NFT projects show similar patterns of behavior. Hackers use a wide range of tactics to scam Discord users, including:

  • deploying sophisticated social engineering, such as phishing and fraudulent accounts that pretend to be an administrator;
  • taking advantage of bot vulnerabilities, such as the Mee6 bot, which enables administrators to automatically give and remove roles and file messages to the community;
  • in some cases, hackers even updated administrator settings with the aim of preventing Discord moderators from interfering with their criminal operations.

The report found that, 

“Hackers’ messages to users have routinely attempted to tap into the sense of urgency typically associated with NFT minting events, prompting users to act quickly in order to avoid missing out on a free giveaway or limited inventory.”

TRM Labs argues that, as NFT projects make efforts to strengthen the security of their platforms and servers, and law enforcement and other groups intensify work to prevent attackers from carrying out future exploits, individuals should also take steps to protect themselves.

“Being aware of common attack vectors, including platforms like Discord, and common tactics by threat actors, including phishing attacks that utilize [fear of missing out] FOMO-inducing language, will help mitigate the risk of becoming a victim of these scams,” the researchers concluded.

____

Learn more: 
Top 7 NFT Scams to Look Out For
Hackers Stole USD 670M from DeFi Projects in Q2, Up by 50% from Q2 2021

Law Firm is Trying to Organize Class Action Lawsuit Against Yuga Labs
Twitter’s Head of Marketing Denies Claims by Yuga Labs Co-Founder About a Social Media Attack

NFT Hackers Attack: Influencer Zeneca and Platform PREMINT are the Latest Targets
Uniswap Users Fall Victim to a USD 8M NFT Phishing Attack, Binance Pulls False Alarm



Source link


Like it? Share with your friends!

50
90 shares, 50 points

What's Your Reaction?

hate hate
3
hate
confused confused
23
confused
fail fail
13
fail
fun fun
10
fun
geeky geeky
6
geeky
love love
30
love
lol lol
33
lol
omg omg
23
omg
win win
13
win
Daily List

0 Comments

Choose A Format
List
The Classic Internet Listicles
Ranked List
Upvote or downvote to decide the best list item
Meme
Upload your own images to make custom memes
Story
Formatted Text with Embeds and Visuals
Poll
Voting to make decisions or determine opinions