The official X account of Decentraland has been hacked, leading to a phishing scam that targets users with a fake MANA token airdrop.
Phishing attack, what we know?
PeckShield’s experts sharedt that attackers are spreading a phishing link disguised as a MANA token airdrop to mislead followers of the virtual reality platform.
#PeckShieldAlert @decentraland's X has been compromised. The phishing site is launch-decentraland[.]org.
Do *NOT* click the link until further official announcements pic.twitter.com/GsvEG15P4A— PeckShieldAlert (@PeckShieldAlert) September 19, 2024
When users click the link, they’re taken to a fraudulent website that prompts them to connect their wallets to claim the supposed airdrop.
Unfortunately, this action results in the theft of their funds shortly afterward. PeckShield advised users not to engage with any content from the official Decentraland account until further announcements confirm that the account’s security has been restored.
This type of social media breach is becoming increasingly common, and not just in the crypto industry.
On the day before, on September 18, scammers hacked several high-profile social media accounts in similar attacks.
How the attacker tried to fool the users
The scam began when the hackers posted about the MANA airdrop allocation for Decentraland’s community on X and pinned the post to gain visibility.
To make the scam appear more legitimate, the attackers commented on their own posts claiming that comments were disabled due to malicious links.
The last legitimate post from Decentraland before the hack was few hourse before the fake post, at around 10:00 PM UTC on September 18, which showcased community fashion choices.
Be prepared and stay aware!
In light of this incident, it is quite imporant for users to remain vigilant against potential scams.
A known expert, Kitboga shared tips in the social media, a show to act accordingly in cases like this. He revealed that scammers often create a sense of urgency to trick victims into acting quickly, less carefully.
Following this advice, Decentraland followers, or actually all crypto users should take their time and think twice before responding to any suspicious messages or links related to the reported hacking of X accounts.
