Blockchain security experts Scam Sniffers exposed a new scheme by scammers targeting crypto users with malicious ads.
Scam Sniffers in an X thread exposed how a malicious ad designed to send users to a fake Pudgy Penguin Website was embedded in a Google Advertisement.
The development reveals a more sophisticated form of Phishing targeted at Pudgy Penguin and Crypto users at large.
How the Scam works
Scam Sniffers revealed that the malicious ad designed by the bad actors was embedded in a Google advert. The malicious advert contains a suspicious Java script code that automatically checks if an online user has a crypto wallet.
If the code detects a wallet, the user is redirected to a fake Pudgy Penguins Website. Once the user lands on the fake website the user’s personal information and login details can be stolen by the scammers and used to gain access to the funds in the wallet.
Scam Sniffers recommend users always check the URL address of Web 3 sites they visit, install Ad blockers, or consider using a separate Web browser for all Web 3 activities.
Phishing is a variant of crypto scams that involves cloning original websites or email addresses of reputable brands or persons and using them to steal the personal information of victims. It is a common cyber threat and works fully powered by Social Engineering schemes.
Compromised Google Ads
The particular scam plot uncovered by Scam Sniffers involved Google Adverts as bait for suspicious codes. This reveals that bad actors can compromise Google Ads and embed malicious software in them.
A notable example was when Google Ads were used to promote a fake version of the Whales Market crypto platform, redirecting users to a fraudulent site where their wallets were compromised.
At the time of the report, there has been no official comment from Google on the issue.
What is Pudgy Penguins?
Pudgy Penguins is a blockchain-based collection of digital artwork composed of non-fungible tokens (NFTs). It is a collection of 8,888 unique NFTs launched on the Ethereum blockchain in August 2021.
Established in July 2021, the organization was formed by a cohort of university students. In April 2022, Pudgy Penguins underwent acquisition by Luca Schnetzler for a sum of 750 ETH, equivalent to $2.5 million
