In the latest report on <\/span>NFT scams<\/span>, North Korean hackers have been found to be behind a major phishing scam targeting NFT holders. According to Blockchain security firm, SlowMist, the hackers used as many as 500 phishing domains to lure unsuspecting victims. Most of these websites were duplicates of popular NFT platforms such as <\/span>OpenSea<\/span> and <\/span>X2Y2<\/span>. <\/span><\/p>\n Here\u2019s all you need to know about the North Korean NFT phishing scam:<\/span><\/p>\n In a report released on December 24, SlowMist alleged that hackers connected to North Korea\u2019s Lazarus Group were behind a massive NFT phishing scam. Typically, the North Korean Advanced Persistent Threat (APT) groups used fake websites to offer investors \u201cmalicious mints\u201d.\u00a0<\/span><\/p>\n To explain, the websites lure victims under the pretext of minting legitimate NFTs. Once they connect their wallets to the website, the hackers get access to the wallets and can drain them as they please.\u00a0<\/span><\/p>\n Furthermore, SlowMist discovered several unique NFT phishing traits used by the North Korean groups. For example, the phishing websites would record visitor data and save it to external sites. Then, they would run various \u201cattack scripts\u201d to access sensitive information such as victim\u2019s access records, wallet addresses, authorizations, approve records, and sigData. Using this information, the North Korean hackers can drain victims\u2019 wallets.\u00a0<\/span><\/p>\n Then, most of the sites used the same Internet Protocol (IP). Moreover, they used multiple tokens, such as WETH, USDC, and DAI, in their phishing attacks. Additionally, one phishing address, in particular, was responsible for a major number of transactions.\u00a0<\/span><\/p>\n \u201cThe hacker was able to receive a total of 1,055 NFTs and made off with a profit of approximately 300 ETH through their sales,\u201d the <\/span>report<\/span> added.\u00a0<\/span><\/p>\n SlowMist\u2019s findings on the North Korean NFT phishing scam further emphasise the need to take <\/span>NFT security<\/span> seriously.<\/span><\/p>\n Get our free, 5 minutes daily newsletter. Join 25,000+ NFT enthusiasts & stay on top \ud83d\udc4a\ud83c\udf1a<\/p>\n<\/div>\n<\/div>\n![\"North](\"https:\/\/nftevening.com\/wp-content\/uploads\/2022\/12\/hack-scaled.jpeg.webp)
\n<\/picture>\n<\/noscript>What is the North Korean NFT phishing scam?<\/b><\/span><\/h2>\n
How do hackers steal NFTs?<\/b>\u00a0\u00a0\u00a0<\/span><\/span><\/h2>\n
Join Our New “To The Moon” daily Newsletter<\/span><\/h4>\n