North Korean hackers linked to cybercrime group 'Lazarus Group' are behind a massive phishing campaign targeting non-fungible token (NFT) investors, using around 500 phishing domains to dupe victims, a new report said.
The strategies used by the North Korean Advanced Persistent
Threat (APT) groups to distract NFT investors from their NFTs, such as the use
of fake websites that appear to be various NFT-related platforms and projects,
Cointelegraph quoted the report as saying.
These fake websites included one that presented itself as a
World Cup project and others that impersonated popular NFT marketplaces like
OpenSea, X2Y2 and Rarible.
The use of "malicious Mints" which tricked the
victims into thinking they are minting a real NFT by connecting their wallet to
the website, was one of the strategies implemented.
The report also showed that a large number of phishing
websites shared the same Internet Protocol (IP), with 372 NFT phishing websites
sharing a single IP and another 320 NFT phishing websites using a different IP.
Other phishing techniques used included saving visitor data
to external websites and recording it, as well as attaching photos to the
projects that were being targeted.
One phishing address alone was able to get 1,055 NFTs and
profit 300 Ethereum (ETH), worth $367,000, through its phishing tactics, the
report said.