Scam Alert: There is New Scam Attempt Targeting MetaMask Pc Users

[Fivestar4everMVP]

Hi everyone, it is adviced to be highly careful and vigilant with some sites as well as metamask right now, most especially if you are a metamask user on pc, some sites we have previously visited, like etherscan.io, dextools, coingecko etc, have been said to be compromised, visiting any of this mentioned sites forcefully prompt metamask to persistently ask you to connect to an nftapes.win site, with a false claim that you won an NFT....

Please do not connect, cancel or close the prompt as many times as it appear, it's a scam.

[1715145896]

1715145896

[1715145896]

1715145896

[1715145896]

1715145896

[1715145896]

1715145896

[Pmalek]

I have used Etherscan yesterday and the day before yesterday because I was checking some transactions, but I didn't notice any requests to connect or log in to MetaMask. I am using Ad Guard and uBlock Origin though and they might be blocking the malicious ads. I highly recommend to have at least uBlock Origin installed in your browsers as it does the job it's supposed to do.

[PX-Z]

Then the ad network should be responsible for this. Imagine they are accepting advertiser including the work of the advertiser script without them checking how the script will work or affect the ad showing in the website partnered of the ad network. Ad blocker should be a must in this space to prevent this kind of malware.

[DaveF]

Ads have been used to distribute malware since forever.
If you are using something like MetaMask and not running an ad-blocker and good AV on the PC and something like a pi-hole if possible then it's increasing your risk.

If you give a site you have never used before and did not go to access to MetaMask. You really should get out of crypto since that is the equivalent of giving someone who randomly calls you up access to your bank account.

Harsh by true.

-Dave

[PX-Z]

That ad network won't take any responsibility unless the victim or website owner sue them and managed to win on court. Even with lots of shady/malicious ads on Google services, google rarely sued.

Oh yeah, you're right, i almost forgot that even as big as google and facebook who has millions of users that might engage on those ads have these kind of shits yet this companies still accepting such kind of ads. How much more on just a mere fraction of users who from the partnered website of coinzilla.

[khaled0111]

I suppose this malicious code contained in the ad affect only the browser plug-in version of metamask and not any other web3 wallet, right!
Although this attack seems a bit advanced, Coinzilla should take full responsibility for it as it's their job to scan all ads for malicious codes. But it's also the users responsibility to read the transaction details before approving it and clicking the sign button.

I hope not many users were affected!

[coin-investor]

I have used Etherscan yesterday and the day before yesterday because I was checking some transactions, but I didn't notice any requests to connect or log in to MetaMask. I am using Ad Guard and uBlock Origin though and they might be blocking the malicious ads. I highly recommend to have at least uBlock Origin installed in your browsers as it does the job it's supposed to do.

Mine are Avira Browser safety and Kaspersky if you are not using an adblocker you should start using one I get at least 50 ads blocked by these two anti-viruses, it's alarming if you are not using any and you are involved in Cryptocurrency, these coded ads are created intentionally to hack your wallet so better safeguard your coins by using a good anti-virus or ad blocks Ublock is free and reliable.

[bitbollo]

thanks for the tip.
as a general rule, I never authorize any connection, I never authorize my wallet to connect to any site that is not of my knowledge or expressly requested.
in the last few days from my laptop I have not noticed any annoying advertisements / malware risk

[ScamViruS]

Advertising networks have made it easier for scammers to quickly deliver their scams to crypto users. Even big companies like Google are approving various types of fake ads which are very dangerous for crypto users. And if this continues, it will create a dangerous situation for new crypto users. Because most of the new crypto users are not aware of ads blocker.
I used etherscan yesterday and didn't see anything like this, maybe for some reason I was a little more lucky.

[lovesmayfamilis]

I also use etherscan.io a lot, and luckily I didn't encounter any intrusive ads redirecting me to other sites. But I had an assumption that I did not receive any notifications because I do not have the MetaMask extension installed. Can these scripts somehow link those who have the extension, and thereby appear in their browsers, and those who do not have MetaMask?
I checked several of my browsers, but I did not find anything like it.

[robelneo]

nftapes.win is not accessible anymore taken down because it's busted, doing research and awareness first before connecting will save you a lot of trouble, we all know how cunning and deceitful these scammers they will employ everything to challenge your greed to fall on your trap, so check your greed and do research and you will be ok, adblockers and good anti-virus can also help you, but nothing beats knowledge.