American Invest Hub
  • Politics
  • Investing
  • Business
  • Latest News

American Invest Hub

  • Politics
  • Investing
  • Business
  • Latest News
Business

Pudgy Penguins NFT users targeted by malicious Google ad campaign

by admin December 26, 2024
December 26, 2024
Pudgy Penguins NFT users targeted by malicious Google ad campaign

A sophisticated phishing campaign has been uncovered, targeting users of the Pudgy Penguins NFT project through malicious Google Ads.

The attack uses advanced mechanisms to exploit vulnerabilities in Web3 wallets and ad networks, exposing unsuspecting users to significant risks.

Researchers, including ScamSniffer, have identified the malicious ads as part of a broader effort to deceive crypto enthusiasts, raising concerns across the Web3 ecosystem.

Scam Sniffer | Web3 Anti-Scam

@realScamSniffer

·Follow

🚨 URGENT SECURITY ALERT 🚨

1/6 A user reported being redirected to a fake @pudgypenguins website through a Singapore news portal. Our investigation revealed this is part of a larger malicious advertising campaign.

1:11 pm · 25 Dec 2024

249

Reply

Read 10 replies

The incident underscores the growing need for heightened vigilance, robust security practices, and better regulatory oversight among NFT holders and Web3 participants to mitigate these threats effectively.

How the NFT phishing attack works

The attackers utilise Google Ads to distribute phishing scripts hosted on the Adloox tracking domain.

These scripts scan users’ browsers for Web3 wallets. When a wallet is detected, the user is redirected to a fraudulent site—pudqypenguin[.]com—designed to steal wallet credentials.

What sets this campaign apart is its ability to exploit Prebid.js, a widely used header bidding API library.

Websites integrating the Adloox analytics module may unknowingly transmit malware-laden scripts, making users more vulnerable to such attacks.

Although Pudgy Penguins NFT users are the immediate targets, researchers warn that the method could easily be adapted for other Web3 projects, amplifying its potential impact.

The attack’s sophisticated nature and its reliance on established advertising frameworks highlight a worrying trend in phishing tactics, especially for the crypto industry.

With growing reliance on Web3 wallets for transactions and asset storage, the repercussions of such breaches could extend beyond individual users, affecting the broader ecosystem, reducing trust in decentralised platforms, and impacting the confidence of new Web3 adopters.

Mitigation measures

Following the exposure of this campaign, calls for proactive user measures have intensified. Recommended steps to minimise risks include:

  • Ad blockers: Installing ad blockers can reduce exposure to malicious advertisements.
  • Browser segregation: Using separate browsers for crypto activities and general browsing can help contain potential threats.
  • URL vigilance: Verifying website URLs before entering wallet credentials is essential to avoid fake sites.

ScamSniffer, a phishing detection tool, has also proven effective in identifying and mitigating similar threats. The swift response of researchers like ZachXBT has been pivotal in addressing the immediate risks.

After the campaign was publicised, Adloox removed the compromised JavaScript files, halting further damage and offering some relief to affected users.

This phishing campaign is a wake-up call for the Web3 community, emphasising the importance of user education, secure browsing practices, and vigilance in the rapidly evolving crypto landscape.

As attackers continue to refine their methods, both users and platform providers must adopt comprehensive security measures to safeguard the integrity of digital assets and interactions.

Collaborative efforts between security researchers, ad networks, and Web3 developers will be essential in preventing future attacks of this scale and complexity.

The post Pudgy Penguins NFT users targeted by malicious Google ad campaign appeared first on Invezz

0
FacebookTwitterGoogle +Pinterest
previous post
Boomers keep wine sales afloat for now, but Gen Z prefers cannabis, sobriety
next post
Alibaba stock rebound is elusive, but a comeback is coming in 2025

Related Posts

UK government plans to extend ban on bottom...

June 9, 2025

Top AI tokens to watch in January 2025:...

January 11, 2025

The Fed may soon cut interest rates. That...

July 12, 2024

CrowdStrike stock forecast: will it hit its ATH...

November 22, 2024

“No chance” iPhones can be made in the...

May 24, 2025

FTSE 100 shares to watch: Aviva, National Grid,...

May 9, 2025

Barcelona protesters throw items and spray travelers with...

July 11, 2024

Consolidation in the markets

June 1, 2025

Venezuela’s tourism paradox: Rich in resources, but struggling...

September 14, 2024

Top 4 crypto stocks to buy and hold...

July 11, 2025

    Stay updated with the latest news, exclusive offers, and special promotions. Sign up now and be the first to know! As a member, you'll receive curated content, insider tips, and invitations to exclusive events. Don't miss out on being part of something special.


    By opting in you agree to receive emails from us and our affiliates. Your information is secure and your privacy is protected.

    Latest News

    • Talen Energy surges 25% to ATH after strategic natural gas power plant acquisition

      July 20, 2025
    • US visa bans on Brazilian judges spark diplomatic rift, cloud economic ties

      July 20, 2025
    • Trump sues Murdoch and News Corp over Wall Street Journal’s Epstein report

      July 20, 2025
    • The new global demographic challenge: not too many, but too few

      July 20, 2025
    • Kraft Heinz plans breakup, weighs $20 billion grocery spin-off: report

      July 13, 2025

    Categories

    • Business (3,434)
    • Investing (2,634)
    • Latest News (2,021)
    • Politics (1,530)
    • About us
    • Contact us
    • Privacy Policy
    • Terms & Conditions

    Disclaimer: americaninvesthub.com, its managers, its employees, and assigns (collectively “The Company”) do not make any guarantee or warranty about what is advertised above. Information provided by this website is for research purposes only and should not be considered as personalized financial advice. The Company is not affiliated with, nor does it receive compensation from, any specific security. The Company is not registered or licensed by any governing body in any jurisdiction to give investing advice or provide investment recommendation. Any investments recommended here should be taken into consideration only after consulting with your investment advisor and after reviewing the prospectus or financial statements of the company.

    Copyright © 2025 americaninvesthub.com | All Rights Reserved