BlockBeats News, December 25th, Scam Sniffer issued a security alert stating that some users reported being redirected to a fake Pudgy Penguins website after visiting a Singaporean news portal. Further investigation revealed that this was part of a larger-scale malicious advertising campaign. The attack works as follows:
• Malicious ads are distributed through the Google ad network
• Ads load suspicious code from Adloox
• The code checks if you have a web3 wallet
• If detected, you are redirected to a fake website named pudgypenguin.
The current attack is targeting Pudgy Penguins users only, but this method could easily be applied to other projects. Users are reminded to carefully check URLs.
How to protect yourself: Enable an ad blocker; use a separate browser for crypto activities; carefully check URLs before connecting your wallet; install browser security extensions.