Home > NEWS > Google Ads-delivered malware drains NFT influencer’s entire crypto wallet

Google Ads-delivered malware drains NFT influencer’s entire crypto wallet

A sponsored advertising link on Google hid malware that siphoned thousands of dollars worth of crypto and NFTs from an influencer’s wallet.

An influential person in NFT claimed that after accidentally installing malware found in Baidu search based on Google ads, these people lost their total assets of "changing future amounts" when they were unable to change dynamic passwords (NFT) and data encryption.

On Jan. 14, the influential pseudonym, known as "NFT Creator" on Twitter, posted a series of articles describing how her "entire data life" had been compromised, including its login password wallet and several online account system vulnerabilities.

The creator of NFT, also known as Alex, said he used Google's Baidu search engine to install OBS, an open source video capture mobile app. But instead of clicking on the official website, he clicked on the title-sponsored advertising campaign, which he called the same thing.

It wasn't until a few hours later, after the attacker posted a series of phishing articles on two Twitter accounts run by Alex, that he realized that the malware, along with the mobile software he wanted, was downloaded for free from the title-sponsored media.

Based on information from an acquaintance, Alex noticed that his login password wallet had been stolen again. The next day, the attacker accessed her SubStack account and sent phishing emails to its more than 16000 users.

Blockchain data show that at least 19 ETH were worth nearly $27000 at that time, and a Mutant Ape Yacht Club (MAYC) NFT with a current cost of 16 ETH ($25000) and several other NFT was sucked out of Alex's wallet.

The attacker transferred to the vast majority of ETH based on several wallets and then sent them to the decentralized Trading Center (DEX) FixedFloat, where they were exchanged for uncertain digital currencies.

Alex believes that the "important incorrectness" of allowing wallet hackers to hack is to set his hardware configuration wallet to a hot wallet, based on typing the seed phrase "in a way that will no longer keep the wallet cool" or offline, which also allows the network hacker to control its login password and NFT.

Unfortunately, NFT's personal experience is not the first time the login password community has solved the login password theft malware in Google ads.

A report released by cyber security company Cyble on January 12th warned that a malware called "RhaDamanthys Stealer" had spread on "attractive phishing pages" based on Google ads.

In October of this year, BinanceCEO Zhao Changpeng warned that Google search engine conclusions had been marketed to promote data encryption phishing and fraud sites.

Cointelegraph contacted Google search for comment, but didn't get a text message. However, Google search shows in the personal center that it "actively works with trusted advertisers and partners to help avoid malware in advertising."

It also describes how it uses "proprietary technology and malware testing tools" to scanner Google ads on time.

Cointelegraph cannot copy Alex's Baidu search, nor can it verify whether the spam site is still themed.

by wjb news
© 2023 WJB All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Why can Bitcoin make money? Is Bitcoin's fixed investment profitable?

For some newcomers to the currency circle, they are not familiar with the investment in the currency circle, and their understanding of the special currency is not very deep. Therefore, they may be at a loss in the choice of investment methods. Many inves

VIDEO

NEWS

Tue, 18 Apr 2023

More