Frame-14

Privacy Ninja

        • DATA PROTECTION

        • Email Spoofing Prevention
        • Check if your organization email is vulnerable to hackers and put a stop to it. Receive your free test today!
        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • AntiHACK Phone
        • Boost your smartphone’s security with enterprise-level encryption, designed by digital forensics and counterintelligence experts, guaranteeing absolute privacy for you and up to 31 others, plus a guest user, through exclusive access.

        • CYBERSECURITY

        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$3,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Secure your digital frontiers with our API penetration testing service, meticulously designed to identify and fortify vulnerabilities, ensuring robust protection against cyber threats.

        • Network Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Mobile Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Web Penetration Testing
        • Fortify your web presence with our specialized web penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats.

        • RAPID DIGITALISATION

        • OTHERS

Popular NFT Marketplace Rarible Targeted By Scammers And Malware

Popular NFT Marketplace Rarible Targeted By Scammers And Malware

Nothing attracts a scammer more than money, and with the NFT craze generating a ton of sales, threat actors are trying to capitalize on it.

An NFT, or Non-Fungible Token, is data stored on a cryptocurrency blockchain that a digital certificate has signed to prove that it is unique and cannot be copied.

ver the past year, NFTs have reached mainstream attention as artists sell their digital art for cryptocurrency at popular websites such as Rarible and OpenSea.

Just recently, an artist known as Beeple sold an NFT digital picture for over $60 million in Christie’s auction.

Threat actors target Rarible’s popularity

A report by cybersecurity and fraud protection company Bolster shows how threat actors use typosquatting domain names that impersonate the popular Rarible.com site but lead them to scams, malware, and other unwanted content.

“Typosquatting domains: Typosquatting domains are lookalike domains targeting a brand. They look very similar to the brand’s legitimate domain and are hard to tell apart.”

“For example, rarible[.]com is the legitimate website of the famous NFT marketplace Rarible. rarbile[.]com is a typosquatting domain targeting Rarible,” explains Bolster in their report.

Search engines, for the most part, do a good job burying these typosquatted domains from search results. However, it is common for scammers to use WhatsApp and Telegram messages, social media posts, direct messages on social media, or even advertisements to spread the typosquatted domain.

Also Read: The 5 Benefits Of Outsourcing Data Protection Officer Service

For example, Bolster discovered a domain wwwrarible[.]com that is missing the period [.] between the www and rarible. When visitors click on this domain’s URLs by mistake, they are redirected to a website pushing a fake Firefox update on visitors.

One of the extensions it redirected to yesterday injects advertisements in sites you visit and tracks your activity online.

Fake Mozilla Firefox update
Fake Mozilla Firefox update

Other domains discovered by Bolster include rarbile[.]com, rareble[.]com, and rareible[.]com, which all redirect visitors to various scams.

These scams include spin-the-wheel games, fake dating sites designed to collect your info, affiliate tech support scams, or sites pushing adware bundles.

Affiliate tech support scam
Affiliate tech support scam

One of the adware bundles fittingly installed a cryptocurrency miner on our test machine, but we have been unable to replicate this in future visits to the site.

We tested similar adware bundles in the past that installed password-stealing Trojans that would harvest credentials saved in your browser and transmit them to a remote site.

Bolster expects scammers to continue targeting the NFT frenzy by creating fake NFT stores that steal buyers’ cryptocurrency, counterfeit NFTs or artist impersonation, and fake giveaways.

If you are interested in NFTs, it is becoming increasingly important to pay close attention to links you click on and perform due diligence on any digital media you plan to purchase.

Also Read: How To Prevent WhatsApp Hack: 7 Best Practices

With NFTs and cryptocurrency in general, there are no returns if you send money to the wrong person.

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us