Virtual reality-focused project Decentraland’s X account was compromised earlier today to promote phishing links. 
According to PeckSheild alert, on Sept. 19 crypto scammers took over Decentraland’s X account to promote a fake aidrop for its native token MANA, which eventually turned out to be a phishing campaign targeting the project’s over 607,000 followers. 
Ironically, the scammers also disabled comments on their posts, claiming it was to prevent ‘malicious links. 
<figure class="wp-block-image is-resized">
 <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeK5_R96HFe9ORSh8vgwEMIMG59bBpa2HqikcuRS6IQtZO6ZbmuwTgbI5Otdgh6TdnHZqotdvx575_-xMUNZKFNWc5NviFjx8BWeEQvMCZV8fYsssUvhLDAx7FomtG5ufU28bpSgdp65ZDWrHcTFtVvYqMr?key=ijWoHbYlz3nw-fXsyRimbQ" alt="Decentraland’s X account hacked, scammers push fake MANA airdrop - 11" style="width: 100%;height:auto">
 <figcaption class="wp-element-caption">
 Scammers posting malicious link on official Decentraland X account | Source: <a href="https://x.com/PeckShieldAlert/status/1836651496307659157" target="_blank">PeckSheild</a>
 </figcaption>
</figure> 
The now-deleted posts first surfaced around 01:50 am UTC and promoted a malicious website bearing Decentraland’s branding. Users redirected to the launch-decentraland[.org] website were asked to claim the airdrop by connecting their wallets. 
Typically in such a scenario, users are prompted to sign a malicious blockchain transaction which transfers the wallet’s control to the bad actor allowing them to drain any crypto funds or other assets present. 
After the initial posts were deleted, two more similar posts were made, this time promoting a different website: token-decentraland[.]org, and as of the time of writing, these posts remain. 
<figure class="wp-block-image is-resized">
 <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf3GbmpevypTY3cQY24TZsmMt3N_J2HrtzWxTkCxPvWzwQ-ELLlsM-2SUxl8_DBEsquupL26f0i4CjjK6HKH28DFbGlGHpdBS1BaaJxxHsK9sLSI2YNCVA0M3aCn7Z91KRmbIvc2PKpcafi0JOYN-0nTcs?key=ijWoHbYlz3nw-fXsyRimbQ" alt="Decentraland’s X account hacked, scammers push fake MANA airdrop - 12" style="width: 100%;height:auto">
 <figcaption class="wp-element-caption">
 Pinned post on Decentraland’s X account promoting a phishing link | Source:&nbsp;<a href="https://x.com/decentraland" target="_blank">Decentraland</a>.
 </figcaption>
</figure> 
It’s unclear how many users have been affected by this campaign so far, but PeckShield has urged users to avoid interacting with Decentraland’s X account. Based on the latest activity, it appears the VR platform has yet to regain control of the account. 
 You might also like: <a rel="" href="https://crypto.news/crypto-fraud-mbappes-x-account-hacked-trader-loses-over-1m/"> Trump family X accounts hacked to push crypto scam </a> 
<h2 class="wp-block-heading" id="crypto-space-is-the-new-hunting-ground-for-phishing-scammers">Crypto space is the new hunting ground for phishing scammers</h2> 
Several prominent crypto projects have been targeted by scammers of late as phishing scams have led to at least <a href="https://crypto.news/august-sees-63m-lost-in-crypto-phishing-despite-fewer-victims-scam-sniffer/" target="_blank">$63 million in losses</a> in August alone. For instance, Polygon’s discord channel was <a href="https://crypto.news/polygon-discord-regains-control-after-hack-scam-link-scare/" target="_blank">compromised</a> last month and phishing links were posted, echoing a <a href="https://crypto.news/ethereum-renzo-breach-discord/" target="_blank">similar attack</a> on the liquid restaking platform Renzo, earlier in the year. 
Meanwhile, individual traders haven’t been spared either, with one large DAI investor <a href="https://crypto.news/whale-loses-over-55m-in-dai-stablecoin-to-phishing-attack/" target="_blank">losing</a> $55 million in a matter of seconds. While an NFT trader lost over $145,000 in Bored Ape Yacht Club collectibles just months before. 
The common denominator in all these attacks has been the victims signing malicious transactions. Cybersecurity experts call this ‘approval phishing’ and it has led to over <a href="https://crypto.news/approval-phishing-scams-a-much-bigger-problem-than-first-thought/" target="_blank">$2.7 billion in losses</a> since 2021 according to Chainalysis. 
These scams are mostly prevalent on social media platforms like X and <a href="https://crypto.news/slowmist-founder-warns-users-of-phishing-attacks-via-telegram/" target="_blank">Telegram</a>, with research from SlowMist indicating that over <a href="https://crypto.news/slowmist-reports-80-of-x-comments-related-to-phishing-software/" target="_blank">80% of all comments</a> under posts from official crypto projects contained phishing links. 
As scams become more sophisticated, the need for vigilance has never been greater. Crypto enthusiasts must stay informed and exercise caution when interacting online. 
In response to these growing threats, cryptocurrency wallets like MetaMask have stepped up by <a href="https://crypto.news/consensys-acquires-wallet-guard-to-bolster-metamask-user-protection/" target="_blank">integrating new security features</a> aimed at protecting users from falling victim to such attacks. 
 Read more: <a rel="" href="https://crypto.news/crypto-fraud-mbappes-x-account-hacked-trader-loses-over-1m/"> Crypto fraud: Mbappé’s X account hacked, trader loses over $1m </a>

Decentraland’s X account hacked, scammers push fake MANA airdrop

Table of Contents

crypto.news

Other articles published on Sep 19, 2024

US prosecutors oppose Mango Market exploiter's motion for acquittal

ATLETA Network Supercharges Web3 with New Grant Program

Buterin: Insurance DAOs Offer ‘Less Imbalance of Incentives’

Bybit's bbSOL Hit $5m in Total Value Locked Within First 24h and Gets an APY Boost

Coinpedia Fintech News

Unlocking Crypto Presale Success: 5 Crucial Steps for Savvy Investors

Join our free newsletter for daily crypto updates!