The NFT theft scheme through a photo cleared up
Previously, we reported about a shocking hack where a scammer stole a $4 million NFT collection by just taking a photo. That case left us with many questions about the technical vector of the attack. The Trust Wallet conducted an investigation and revealed the scheme. The day before the affair, the perpetrator shared the NDA file with the victim and requested KYC information. The fake NDA contained malware that targeted the smartphone. The criminal then persuaded the victim to transfer funds from the multi-sig wallet to a single Trust Wallet to confirm NFT ownership and copied the information he needed. The balance photo was just smoke and mirrors. But damn, this scheme deserves an episode in the new James Bond series.
On this page
Previously, we reported about a shocking hack where a scammer stole a $4 million NFT collection by just taking a photo.
That case left us with many questions about the technical vector of the attack. The Trust Wallet conducted an investigation and revealed the scheme.
The day before the affair, the perpetrator shared the NDA file with the victim and requested KYC information. The fake NDA contained malware that targeted the smartphone.
The criminal then persuaded the victim to transfer funds from the multi-sig wallet to a single Trust Wallet to confirm NFT ownership and copied the information he needed.
The balance photo was just smoke and mirrors. But damn, this scheme deserves an episode in the new James Bond series.
The content on The Coinomist is for informational purposes only and should not be interpreted as financial advice. While we strive to provide accurate and up-to-date information, we do not guarantee the accuracy, completeness, or reliability of any content. Neither we accept liability for any errors or omissions in the information provided or for any financial losses incurred as a result of relying on this information. Actions based on this content are at your own risk. Always do your own research and consult a professional. See our Terms, Privacy Policy, and Disclaimers for more details.