Hackers create fake updates in the Solana ecosystem airdrop NFT to steal user funds

ChainCatcher news, according to Cointelegraph, hackers airdropped NFTs named "PHANTOMUPDATE.COM" or "UPDATEPHANTOM.COM" to users in the Solana ecosystem. When users opened the NFT, they were informed that the Phantom wallet had released a new security update. If users clicked on the update, they would download malware from GitHub that steals users' browser information, history, cookies, passwords, SSH keys, and other information.

It is reported that in August, over 8,000 user wallets in the Solana ecosystem were stolen, amounting to about $8 million, including wallets of Phantom wallet users. This security vulnerability was later associated with a flaw in the Solana-based Web3 wallet service Slope. (Cointelegraph)