Decentraland’s X account was compromised earlier today, leading to the promotion of phishing links targeting its followers.
According to a PeckShield alert, on September 19, crypto scammers took control of Decentraland’s X account to advertise a fraudulent airdrop for its native token, MANA. This phishing campaign aimed at the project’s over 607,000 followers raised significant concerns in the crypto community.
Interestingly, the scammers disabled comments on their posts, claiming it was to prevent the spread of “malicious links.”
The first fraudulent posts appeared around 01:50 AM UTC, directing users to a malicious website that mimicked Decentraland’s branding. Visitors to the launch-decentraland[.org] site were prompted to claim the fake airdrop by connecting their wallets. This could lead users to inadvertently sign a harmful blockchain transaction, granting the scammers control over their wallets and allowing them to drain funds and assets.
After the initial posts were deleted, two additional posts surfaced, promoting another malicious site: token-decentraland[.org. As of this writing, these posts remain active.
PeckShield has urged users to refrain from engaging with Decentraland’s X account until the situation is resolved. It remains unclear how many users have been affected, and it appears that the VR platform has not yet regained control of its account.
The Growing Threat of Phishing Scams
This incident is part of a larger trend in the crypto space, where phishing scams have caused significant financial losses. In August alone, these scams resulted in at least $63 million in losses, with prominent projects like Polygon and Renzo also targeted. Individual traders have suffered devastating losses, including a DAI investor who lost $55 million in seconds and an NFT trader who lost over $145,000 in Bored Ape Yacht Club collectibles.
The common thread in these attacks is the victims unknowingly signing malicious transactions, a tactic known as “approval phishing.” According to Chainalysis, such scams have led to over $2.7 billion in losses since 2021.
Phishing attacks predominantly occur on social media platforms like X and Telegram, with research from SlowMist indicating that over 80% of comments on posts from official crypto projects contain phishing links.
As these scams become increasingly sophisticated, the need for caution is more critical than ever. Crypto enthusiasts must remain vigilant and informed while interacting online.
In response to these growing threats, cryptocurrency wallets like MetaMask are implementing new security features designed to protect users from falling victim to such attacks.
