SlowMist Cosine has detected bookmark phishing attacks targeting FOMO web-based platforms that steal crypto assets
BIBIBI
AT A GLANCE
SlowMist Cosine monitoring indicates that malicious bookmarks targeting FOMO web users can hijack logged-in accounts and steal crypto assets.
Article
SlowMist Cosine: Beware of FOMO web-based bookmark phishing attacks
BlockBeats reports,October 8, according to monitoring by SlowMist Cosine, bookmark phishing attacks targeting FOMO web users and designed to steal funds are emerging. Such phishing webpages lure users into completing a fake CAPTCHA, dragging malicious JavaScript code into the browser's bookmarks and saving it as a bookmark. After users subsequently click this bookmark 2 to 3 times, the previously logged-in FOMO account will be hijacked by attackers, and the crypto assets in the account will be stolen immediately.
Original link https://m.theblockbeats.info/flash/370671
Key points
01
BlockBeats states that October 8, according to monitoring by SlowMist Cosine, bookmark phishing attacks targeting FOMO web users and designed to steal funds are emerging.
02
Phishing webpages lure users into completing a fake CAPTCHA and dragging malicious JavaScript code into the browser's bookmarks to save it as a bookmark.
03
Users subsequently click the bookmark 2 to 3 times, after which the previously logged-in FOMO account will be hijacked by attackers.
04
The original text states that the crypto assets in the account will be stolen immediately.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This attack disguises malicious JavaScript code as a browser bookmark. After users follow prompts on a phishing webpage to save and click the bookmark multiple times, a previously logged-in FOMO account may be hijacked, and the crypto assets in the account may also be stolen.
Why it matters to readers
The consequences described in the original text include FOMO account hijacking and the immediate theft of crypto assets in the account, directly involving users' account and asset security.
Do not drag code into bookmarks at the request of unfamiliar webpages, and do not click bookmarks from unknown sources; so-called “CAPTCHAs” may also be deceptive prompts.
Risks and unknowns
The provided materials do not include an independent technical report or a malicious code sample.
The provided materials do not specify the number of victims, the amount stolen, or the specific distribution channels.
The provided materials do not state whether FOMO response measures have been taken.
Related Developments
Loading event timeline…
Related concepts
Bookmark phishing
This term is not in the glossary yet. Browse related concepts in the glossary.
