Skip to main content

Hackers from North Korea are stealing NFTs using almost 500 different phishing domains.

 

Hackers from North Korea are stealing NFTs using almost 500 different phishing domains.

The cybercriminals established dummy websites that posed as legitimate NFT marketplaces, NFT projects, and even a DeFi platform.

There have been reports that hackers with ties to North Korea's Lazarus Group are behind a massive phishing campaign aimed at investors in nonfungible tokens (NFTs). This campaign is said to have used nearly 500 phishing domains to trick victims.

SlowMist, a blockchain security company, published a report on December 24 revealing the strategies that North Korean Advanced Persistent Threat (APT) groups have used to separate NFT investors from their NFTs. These strategies include the use of decoy websites that are disguised as a variety of different NFT-related platforms and projects.

Some examples of these fake websites include a website that pretends to be a project associated with the World Cup, as well as websites that impersonate well-known NFT marketplaces like OpenSea, X2Y2, and Rarible. Another example of one of these fake websites is a website that pretends to be a site that is related to the Olympics.

According to SlowMist, one of the strategies that was implemented was to have these decoy websites offer "malicious Mints." This strategy involves tricking victims into believing that they are minting a genuine NFT by connecting their wallet to the website in question.

However, the NFT is actually a fraudulent transaction, and the hacker, who now has access to the victim's wallet, is left with the ability to steal funds from it.

The report also found that many of the phishing websites shared the same Internet Protocol (IP), with 372 NFT phishing websites operating under a single IP and another 320 NFT phishing websites associated with another IP. This information was gleaned from the analysis of the phishing websites.

According to SlowMist, the phishing campaign has been going on for a number of months, and they noted that the earliest registered domain name was approximately seven months ago.

Phishing attempts also linked images to target projects and recorded visitor data, saving it on third-party websites. These are just two of the many methods that were used.

After the hacker was about to obtain the visitor's data, they would then proceed to run various attack scripts on the victim, which would allow the hacker access to the victim's access records, authorizations, and use of plug-in wallets, in addition to sensitive data such as the victim's approve record and sigData. After the hacker had obtained the visitor's data, they would then proceed to run various attack scripts on the victim..net/YwotbKdP4sVunJGfdhmgww/e8f260a6-84bf-4222-a093-e1ef14e44c00/

After obtaining all of this information, the hacker is able to gain access to the victim's wallet and view all of the victim's digital assets.

However, SlowMist emphasized that this is just "the tip of the iceberg," as the analysis only looked at a small portion of the materials and extracted "some" of the phishing characteristics of the North Korean hackers. This was due to the fact that the analysis only looked at a small portion of the materials.

For instance, SlowMist highlighted the fact that just one phishing address was able to gain 1,055 NFTs and profit 300 Ether, which is equivalent to a profit of $367,000 through the use of its phishing techniques.

It was also revealed that the same North Korean APT group was responsible for the phishing attack against Naver, which had been documented by Prevailion on March 15.

In the year 2022, North Korea was the target of a number of different theft crimes involving cryptocurrencies.

According to a report that was released by the National Intelligence Service (NIS) of South Korea on December 22, North Korea is responsible for the theft of cryptocurrencies worth a total of $620 million just this year.

In October, Japan's National Police Agency issued a cautionary message to the country's crypto-asset businesses, advising them to exercise extreme caution around the hacking group associated with North Korea.

Labels:

Comments

Post a Comment

Popular posts from this blog

Bank of Japan surprises the markets

This is the FT News Briefing podcast episode's audio transcript: Markets are stunned by Bank of Japan. Jennifer Smith From the Financial Times, good morning. Today is December 21st, a Wednesday. This concludes the FT News Briefing. Markets shook when Japan's central bank finally gave in. The line for refunds is being pushed forward by a group of FTX clients. Tom Wilson of the FT also takes a look back at the eventful year in the energy markets. Wilson, Tom I mean, this chapter would actually be called "Russia" there, wouldn't it? Jennifer Smith The news you need to start your day is presented by me, Jess Smith, who is filling in for Marc Filippino. Markets were alarmed by the Bank of Japan's unexpected change in monetary policy. The central bankers of Japan had long maintained an ultra-loose monetary policy and refused to raise interest rates with other central banks. However, BOJ officials, including governor Haruhiko Kuroda, announced Wednesday that they wil...
Post a Comment
Read more

Futures fall after key averages open lower.

Stock futures dipped Tuesday morning after the BOJ widened its yield target range. Dow futures fell 236 points (0.72%). S&P 500 futures lost 0.86 and 1.05 percent. The Dow fell 162 points, or 0.5%, on Monday. S&P 500 declined 0.9% and Nasdaq Composite lost 1.5%. Stocks are set to conclude the month and year in the red, and investors' dreams for a Santa Claus bounce are evaporating. No Santa yet. Louis Navellier, founder of Navellier & Associates, remarked, "buckle up." "One hopes the awful news is over. No Fed moves until February. We're not gapping down but not recouping last week's losses." Investors feared the Fed may cause a recession. The central bank boosted its benchmark interest rate by 50 basis points last week and said the terminal rate might reach 5.1%. The European Central Bank raised rates and forecast future hikes last week, further pressuring traders. Over 90% of central banks raised interest rates this year, a (largely) global...
Post a Comment
Read more

The dollar makes slight gains while investors mull over the outlook for interest rates and the economy.

There will be a multitude of significant decisions made by central banks the following week, including those made by the Federal Reserve, the European Central Bank, and the Bank of England. The most important concern for traders and investors is whether or not inflation has hit its maximum level, which would provide policymakers greater leeway to implement interest rate hikes of a more moderate nature over the next few months. The monthly consumer inflation reading for the United States is also due the following week; it will be released on December 13, one day before the Fed's policy meeting on that day, and it may play a vital role in determining longer-term expectations for monetary policy. According to Adam Cole, a currency analyst at RBC, "U.S. CPI is the one data release that seems to really important for broader dollar direction at the moment," and "until we have those central bank meetings and one key monthly U.S. data release, not a great deal is occurring....
Post a Comment
Read more