Software that can be used to access computers remotely has been put on a phishing site that looks like an NFT Pokémon card game.
Hackers conceal malware in a fake NFT game
A cybersecurity firm has cautioned that a phishing website pretending to offer a Pokémon-branded NFT card game has been spreading malware to unsuspecting users.
The website, which at the time of writing was still live, also claims to offer an NFT marketplace, with a link to buy tokens, and even an area to stake NFTs — all based on the popular Japanese media brand.
On January 6, however, a division of the South Korean cybersecurity company AhnLab informed the public about the website, saying that users were actually downloading a remote access program that allows hackers to take control of their device rather than a game.
The firm said that the NetSupport Manager utility would let attackers to remotely control the computer’s mouse and keyboard, examine the system’s file management and history, and even execute commands that would allow them to install more malware.
The general public has been instructed to only purchase or download apps from official websites and to avoid opening attachments from suspicious emails.