OpenSea Discord server hacked, cov neeg siv ceeb toom kom ceev faj ntawm phishing scams

Nonfungible token (NFT) kev lag luam OpenSea raug kev tsim txom cov neeg rau zaub mov ntawm nws lub ntsiab Discord channel, nrog cov neeg nyiag nkas tshaj tawm cov lus tshaj tawm "Youtube kev koom tes" cuav.

Lub screenshot Sib koom Hnub Friday qhia txog kev sib koom tes cuav, nrog rau qhov txuas mus rau qhov chaw phishing. OpenSea Support's official Twitter account tweeted tias lub khw qhov Discord server tau ua txhaum cai rau hnub Friday sawv ntxov thiab ceeb toom cov neeg siv tsis txhob nyem cov kab txuas hauv cov channel.

Tsis txhob nyem qhov txuas hauv peb Discord.
Peb tseem tab tom tshawb xyuas qhov xwm txheej no thiab yuav qhia cov ntaub ntawv raws li peb muaj. https://t.co/jgtHcXifer
- Kev them nyiaj yug OpenSea (@opensea_support) Tej zaum 6, 2022

Tus neeg nyiag nkag tau tshaj tawm thawj zaug, tshaj tawm hauv cov lus tshaj tawm, tau thov tias OpenSea tau "kev koom tes nrog YouTube coj lawv cov zej zog mus rau NFT Space." Nws kuj tau hais tias lawv yuav c-tso tawm mint pass nrog OpenSea uas yuav tso cai rau cov neeg tuav haujlwm mint lawv qhov project dawb.

Nws zoo nkaus li tias tus neeg nkag tebchaws tuaj yeem nyob hauv server rau lub sijhawm ntev ua ntej OpenSea cov neeg ua haujlwm tuaj yeem rov qab tswj tau. Hauv kev sim los txhawb "kev ntshai ploj mus" hauv cov neeg raug tsim txom, tus neeg nyiag nkas tau rov qab ua raws li cov lus tshaj tawm kev dag ntxias thawj zaug, rov ua qhov txuas phony, thiab thov tias 70% ntawm cov khoom tau raug minted lawm.

Tus kws dag ntxias kuj tau sim ntxias cov neeg siv OpenSea los ntawm kev hais tias YouTube yuav muab "kev siv tsis zoo" rau cov uas tau thov NFTs. Lawv tau thov tias qhov kev thov no yog qhov tshwj xeeb thiab yuav tsis muaj kev koom nrog ntxiv, uas yog ib qho ntawm cov neeg dag ntxias.

official lus los ntawm cov founders
Doodles kev tsis sib haum xeeb tau nkag mus los ntawm ib qho hacked bot. Txhua cov lus tawm hauv ib qho ntawm peb cov channel, tsis quav ntsej rau tam sim no. Peb nyob ntawm nws. Peb cov kws lij choj, cov phooj ywg ntawm kev tsis sib haum xeeb, thiab cov zej zog pab peb. Peb yuav hloov kho koj thaum peb kuaj qhov xwm txheej.
— doodles (@doodles) Lub ob hlis ntuj 26, 2022

On-saw cov ntaub ntawv qhia tau hais tias 13 lub hnab nyiaj uas zoo li tau raug cuam tshuam los ntawm kev sau ntawv, nrog qhov muaj txiaj ntsig zoo tshaj plaws NFT raug nyiag yog Founders 'Pass muaj nqis nyob ib puag ncig 3.33 ETH lossis $ 8,982.58.

Cov ntaub ntawv pib hais tias tus intruder siv webhooks nkag mus rau server tswj. Lub webhook yog lub server plugin uas tso cai rau lwm cov software kom tau txais cov ntaub ntawv ntawm lub sijhawm. Webhooks tau siv ntau zuj zus raws li kev tawm tsam vector los ntawm cov neeg nyiag nkas vim tias lawv muaj peev xwm xa cov lus los ntawm nom tswv neeg rau zaub mov.

OpenSea Discord tsis yog tib tus neeg rau zaub mov uas tau siv los ntawm webhooks. Ntau qhov tseem ceeb NFT collections 'channels, suav nrog Bored Ape Yacht Club, Doodles thiab KaijuKings, tau raug cuam tshuam rau lub Plaub Hlis thaum ntxov nrog qhov muaj kev cuam tshuam zoo sib xws uas tau tso cai rau tus neeg nyiag zaub siv cov neeg siv nyiaj hauv tuam txhab los tshaj tawm phishing txuas.