American Invest Hub
  • Politics
  • Investing
  • Business
  • Latest News

American Invest Hub

  • Politics
  • Investing
  • Business
  • Latest News
Business

Pudgy Penguins NFT users targeted by malicious Google ad campaign

by admin December 26, 2024
December 26, 2024
Pudgy Penguins NFT users targeted by malicious Google ad campaign

A sophisticated phishing campaign has been uncovered, targeting users of the Pudgy Penguins NFT project through malicious Google Ads.

The attack uses advanced mechanisms to exploit vulnerabilities in Web3 wallets and ad networks, exposing unsuspecting users to significant risks.

Researchers, including ScamSniffer, have identified the malicious ads as part of a broader effort to deceive crypto enthusiasts, raising concerns across the Web3 ecosystem.

Scam Sniffer | Web3 Anti-Scam

@realScamSniffer

·Follow

🚨 URGENT SECURITY ALERT 🚨

1/6 A user reported being redirected to a fake @pudgypenguins website through a Singapore news portal. Our investigation revealed this is part of a larger malicious advertising campaign.

1:11 pm · 25 Dec 2024

249

Reply

Read 10 replies

The incident underscores the growing need for heightened vigilance, robust security practices, and better regulatory oversight among NFT holders and Web3 participants to mitigate these threats effectively.

How the NFT phishing attack works

The attackers utilise Google Ads to distribute phishing scripts hosted on the Adloox tracking domain.

These scripts scan users’ browsers for Web3 wallets. When a wallet is detected, the user is redirected to a fraudulent site—pudqypenguin[.]com—designed to steal wallet credentials.

What sets this campaign apart is its ability to exploit Prebid.js, a widely used header bidding API library.

Websites integrating the Adloox analytics module may unknowingly transmit malware-laden scripts, making users more vulnerable to such attacks.

Although Pudgy Penguins NFT users are the immediate targets, researchers warn that the method could easily be adapted for other Web3 projects, amplifying its potential impact.

The attack’s sophisticated nature and its reliance on established advertising frameworks highlight a worrying trend in phishing tactics, especially for the crypto industry.

With growing reliance on Web3 wallets for transactions and asset storage, the repercussions of such breaches could extend beyond individual users, affecting the broader ecosystem, reducing trust in decentralised platforms, and impacting the confidence of new Web3 adopters.

Mitigation measures

Following the exposure of this campaign, calls for proactive user measures have intensified. Recommended steps to minimise risks include:

  • Ad blockers: Installing ad blockers can reduce exposure to malicious advertisements.
  • Browser segregation: Using separate browsers for crypto activities and general browsing can help contain potential threats.
  • URL vigilance: Verifying website URLs before entering wallet credentials is essential to avoid fake sites.

ScamSniffer, a phishing detection tool, has also proven effective in identifying and mitigating similar threats. The swift response of researchers like ZachXBT has been pivotal in addressing the immediate risks.

After the campaign was publicised, Adloox removed the compromised JavaScript files, halting further damage and offering some relief to affected users.

This phishing campaign is a wake-up call for the Web3 community, emphasising the importance of user education, secure browsing practices, and vigilance in the rapidly evolving crypto landscape.

As attackers continue to refine their methods, both users and platform providers must adopt comprehensive security measures to safeguard the integrity of digital assets and interactions.

Collaborative efforts between security researchers, ad networks, and Web3 developers will be essential in preventing future attacks of this scale and complexity.

The post Pudgy Penguins NFT users targeted by malicious Google ad campaign appeared first on Invezz

0
FacebookTwitterGoogle +Pinterest
previous post
Boomers keep wine sales afloat for now, but Gen Z prefers cannabis, sobriety
next post
Alibaba stock rebound is elusive, but a comeback is coming in 2025

Related Posts

Short VIAV: Viavi Solutions Faces Bearish Reversal After...

February 3, 2025

Will scrutiny around “tax dodges” and alleged labour...

September 28, 2024

Nissan shares jump 23% on potential Honda merger:...

December 18, 2024

Sam Bankman-Fried to learn fate today for orchestrating...

March 29, 2024

Sensex index slowly forms a bullish pattern, signaling...

March 31, 2025

Why Google is calling the Gulf of Mexico...

February 11, 2025

Sainsbury’s shares rise as profit tops £1bn; analysts...

April 17, 2025

BNB price prediction: Binance daily trading volume jumps...

January 17, 2025

ServiceTitan stock soars 40% on Nasdaq debut

December 13, 2024

GE Vernova (GEV) stock downgraded: what does the...

January 25, 2025

    Stay updated with the latest news, exclusive offers, and special promotions. Sign up now and be the first to know! As a member, you'll receive curated content, insider tips, and invitations to exclusive events. Don't miss out on being part of something special.


    By opting in you agree to receive emails from us and our affiliates. Your information is secure and your privacy is protected.

    Latest News

    • Kraft Heinz plans breakup, weighs $20 billion grocery spin-off: report

      July 13, 2025
    • Trump’s 50% tariff on Brazil imports to brew trouble for Starbucks and Dutch Bros

      July 13, 2025
    • US to announce 30% tariff on EU and Mexico says Trump

      July 13, 2025
    • Why India is rushing to build bigger banks and what’s standing in the way

      July 13, 2025
    • Wall Street braces for weakest earnings season since 2023 amid market highs

      July 13, 2025

    Categories

    • Business (3,378)
    • Investing (2,613)
    • Latest News (2,017)
    • Politics (1,530)
    • About us
    • Contact us
    • Privacy Policy
    • Terms & Conditions

    Disclaimer: americaninvesthub.com, its managers, its employees, and assigns (collectively “The Company”) do not make any guarantee or warranty about what is advertised above. Information provided by this website is for research purposes only and should not be considered as personalized financial advice. The Company is not affiliated with, nor does it receive compensation from, any specific security. The Company is not registered or licensed by any governing body in any jurisdiction to give investing advice or provide investment recommendation. Any investments recommended here should be taken into consideration only after consulting with your investment advisor and after reviewing the prospectus or financial statements of the company.

    Copyright © 2025 americaninvesthub.com | All Rights Reserved