Recently, the security team Scam Sniffer issued an urgent security alert aimed at reminding users to remain vigilant while surfing the internet to avoid falling into the trap of phishing websites. Reports indicate that a user was inadvertently lured to a fake Pudgy Penguins website through a link from a well-known news portal in Singapore, and this is just the tip of the iceberg.
After in-depth investigation, Scam Sniffer discovered that a massive malicious advertising campaign lies behind this series of incidents. These malicious ads are quietly served through the Google ad network, embedding suspicious code from Adloox. This code acts like a cunning detective, silently probing whether the user possesses a Web3 wallet. Once detected, the user is quickly redirected to a meticulously forged website—its URL is very similar to the real Pudgy Penguins website, but careful observation reveals subtle differences, such as letter replacements and omissions in 'pudqypenguin[]com'.
It is worth noting that while the main target of current attacks is the Pudgy Penguins user base, such scam techniques can easily be replicated and applied to other cryptocurrency projects, and the potential threat should not be underestimated.
In the face of such cunning scams, Scam Sniffer provides users with the following practical prevention advice:
Enable ad blocker: Installing and enabling an ad blocker can effectively shield against malicious ads, reducing the risk of being lured to fake websites.
Use a separate browser to access cryptocurrency-related websites: It is recommended that users use a separate browser environment when conducting cryptocurrency transactions or visiting related websites to reduce the risk of personal information leakage.
Threefold confirmation URL before connecting wallet: Before performing any operations while connecting your wallet, be sure to carefully check the URL to ensure it is correct. It is recommended to confirm at least three times, just in case. Remember, a small letter difference could be a trap meticulously designed by scammers.
Install the ScamSniffer plugin: This plugin can provide users with real-time website security detection services, helping users identify and avoid potential scam websites.
In summary, in the face of increasingly rampant online scams, users should remain highly vigilant and take necessary preventive measures. Only by doing so can they enjoy the conveniences brought by the internet while ensuring their property is safe from harm.