16/01/2023 Google Ads-delivered malware drains NFT influencer’s entire crypto wallet

A sponsored advertising link on Google hid malware that siphoned thousands of dollars worth of crypto and NFTs from an influencer’s wallet.

Google Ads-delivered malware drains NFT influencer’s entire crypto wallet

An NFT influencer claims to have lost “a life-changing amount” of their net worth in nonfungible tokens (NFTs) and crypto after accidentally downloading malicious software found via a Google Ad search result.

The pseudo-anonymous influencer known on Twitter as “NFT God” posted a series of tweets on Jan. 14 describing how his “entire digital livelihood” came under attack including acompromise of his crypto walletand multiple online accounts.

NFT God, known also as “Alex,” said he used Google's search engine to download OBS, an open-source video streaming software. But instead of clicking on the official website, he clicked the sponsored advertisement for what he thought was the same thing.

It wasn’t until hours later — after a series of phishing tweets posted by attackers on two Twitter accounts that Alex operates — that he realized malware was downloaded from the sponsored advertisement alongside the software he wanted.

Following a message from an acquaintance, Alex noticed his crypto wallet was also compromised. The next day, attackers breached his Substack account and sent phishing emails to his 16,000 subscribers.

Blockchain data shows that at least 19 Ether worth nearly $27,000 at the time, a Mutant Ape Yacht Club (MAYC) NFT with a current floor price of 16 ETH ($25,000), and multiple other NFTs were siphoned from Alex’s wallet.

The attacker moved most of the ETH through multiple wallets before sending it to the decentralized exchange (DEX) FixedFloat, where it was swapped for unknown cryptocurrencies.

Alex believes the “critical mistake” that allowed the wallet hack was setting up his hardware wallet as ahot wallet by entering its seed phrase“ in a way that no longer kept it cold,” or offline, which allowed the hackers to gain control of his crypto and NFTs.

Unfortunately, NFT God’s experience isn’t the first time the crypto community has dealt with crypto-stealing malware in Google Ads.

A Jan. 12 report from cybersecurity firm Cyble warned of an information-stealing malware called “Rhadamanthys Stealer” spreading through Google Ads on “highly convincing phishing webpage[s].”

In October, Binance CEO Changpeng “CZ” Zhao warned that Google search results were promoting crypto phishing and scamming websites.

Cointelegraph contacted Google for comment but did not receive a response. In its help center, however, Google said it “actively works with trusted advertisers and partners to help prevent malware in ads.”

It also describes its use of “proprietary technology and malware detection tools” to regularly scan Google Ads.

Cointelegraph was unable to replicate the results of Alex’s search nor verify if the malicious website was still active.

Arts

google-ads-delivered-malware-drains-nft-influencers-entire-crypto-wallet

Interesting NFTs
Auto-Erotic Sphinx with Toys
In this image, a giant sphinx spoons itself in erotic play within an aquatic styled environment littered by various denizens. These creatures include symbols and archetypes both current and nostalgic–each inhabiting a rootedness within mass cultural adolescence. Among the roster are Servbots, video game inspired mushrooms, a Pacman-like creature, a distant sea faring rubber duck, creatures sporting the symbols reminiscent of popular anime, and a Pokemon-like rabbit (a novel incarnation of Ganesha indicated by the Shiva trident on its nose). In addition, a few sea creatures partly inspired by sea monsters of western antiquity conglomerate along the mid left side of the composition. The Sphinx itself is an amalgam of aquatic, fetishist, ancient Egyptian, and 80’s style adornments, both living, as in a clown fish, or material, such as a cassette tape. Nautically colored antennae receive somatic signals from the atmosphere, perhaps from the 8 Ball moon or giant ringed planet beyond.
Ragdolph
Sup playa! I'm Ragdolph. I've never told anyone this, but I once licked a dog. When I'm not reading Danielle Steele, I'm talking about how much I lift! Purrhaps this is the beginning of a beautiful relationship.
YouTube Lab
YouTube logo factory. 10-second loop, 30 fps. Created using Cinema4D, X-Particles, TurbulenceFD, Octane, and After Effects.
The Investor's Dream
The second "Visual Toy" about cryptocurrency and its universe that continues the exclusive collection on this theme. After the first Visual Toy, dedicated to the cryptocurrency itself, this visual toy is the other side of the coin. It represents, as its title tells us, the investor's dream, the current person and his financial hopes. A surreal fantasy of the dreams and longings of every investor, in this case the crypto investor. In this magical, happy and colorful dream, aspirations of all kinds intermingle, both the desire for great benefits, represented in a long animation that shows us a production cycle or series production that ranges from the gastronomic recipe of a two-ingredient cake. Bitcoin slice and Ethereum smoothie, passing through magic, represented in a fairy that transforms the cake into real money, which is sucked into a giant capsule to accumulate it and multiply it. The rest is full of investor aspirations, which appear in their dreams in the form of profits or screens that announce that values are rising steadily, as well as physical possessions, such as the sailboat, the helicopter, homes and other objects or possibilities. A dream full of happiness, fun and hope.
#46216
By OthersideDeployer