North Korean Hackers Target NFT Investors with Massive Phishing Campaign

Hackers linked to North Korea’s Lazarus Group have reportedly been running a large-scale phishing campaign targeting non-fungible token (NFT) investors, using almost 500 phishing domains.

Blockchain security firm SlowMist released a report revealing that the group, known as an Advanced Persistent Threat (APT), has been using decoy websites disguised as various NFT-related platforms and projects to dupe victims into thinking they are minting a legitimate NFT by connecting their wallet to the site, when in fact the NFT is fraudulent and the victim’s wallet is left vulnerable to the hacker.

🚨SlowMist Security Alert🚨

North Korean APT group targeting NFT users with large-scale phishing campaign

This is just the tip of the iceberg. Our thread only covers a fraction of what we've discovered.

Let's dive in pic.twitter.com/DeHq1TTrrN
— SlowMist (@SlowMist_Team) December 24, 2022

SlowMist said the campaign has been ongoing for several months and that just one phishing address was able to obtain 1,055 NFTs and profit 300 ETH, worth around $367,000, through its tactics.

It added that the same APT group was responsible for the Naver phishing campaign documented by Prevailion in March.

TagsNFT