Hacker targets Moonbirds, PROOF, Axie Infinity, RTFKT, Memeland and CyberConnect
A phishing scam on Discord targets numerous crypto projects. A hacker posted fraudulent links on various NFT-related Discord servers—all of which pretended to be NFT mints.
According to the blockchain security firm Peckshield, the popular NFT collections targeted include Moonbirds, PROOF, and the play-to-earn game Axie Infinity.
The virtual sneakers company RTFKT, payment network Memeland, and social graph protocol CyberConnect also fell victim:
Following the hack, Axie Infinity took to Twitter to inform its Discord members to turn their servers on and off before exploring the project’s Discord channel:
Axie Infinity believes the hacker gained access to a fake MEE6 bot, before sending fraudulent announcements regarding a mint.
Similarly, Discord security auditor, Skits, also noticed issues with MEE6 features on the accounts, while announcing the phishing scam compromised admin accounts:
MEE6 is a Discord bot that partakes in several tasks, including leveling rolls, moderation, playing music, making announcements, etc. Memeland also trusts the bot had a part to play in the scam:
Nevertheless, the team behind MEE6 seemingly deny allegations of the compromise. ROOG, Moonbirds, and RTFKT also failed to report the scam.
BEWARE OF PHISHING SCAMS ON DISCORD
Discord phishing scams consist of a malicious user who compromise accounts to send fraudulent messages that appear legitimate.
To prevent falling prey to scams, it’s vital to take action:
- Steer clear of responding to requests requiring personal information
- Do not reply, click on links or images, or open attachments from suspicious-looking DMs
- Beware of fake giveaways and NFT drops. If it’s too good to be true, it probably is
- Never scan a QR code to redeem a Nitro code—Discord will never ask you to do this
- Use your desktop app when signing into Discord using a QR code
- Never give away tokens via Discord. There is absolutely no reason to open Discord’s Developer Console
The above tactics are the most common ways scammers will likely virtually brainwash Discord members into giving up information.
When noticing fraudulent activity on the server, block and report the members and inform Discord Support to prevent others from becoming stuck.
Subscribe to the NFT Lately newsletter to receive news covering the latest NFT drops, releases, reviews, and more.
