Phantom wallet phishing attack

[cryptoaddictchie]

Oh for sure. Developers need to be even more careful with their security, especially after so many scam campaigns targeted towards them lately. But you can only blame them for things they can improve. They can't guarantee people to input their seeds phrase to some websites. Especially if they put a notice saying their wallet won't ask for a private key or something similar whenever the user needs to make a transaction.

Yeah Im not sure if they put noticed with that considering phamtom is one of the biggest used wallet im the solana wallet. I think they are the number 1 in terms of usage. Cause even me, Im using their wallet if ever I used solana, good thing is I didnt check my wallet during that time and escape this tragic scenario.

[Zaguru12]

Unfortunately, this is one of the bad aspects of Airdrops, where you link your wallet to a random site, and therefore you must be careful when clicking on any messages from that sites, as many of these sites do not require you have a balance in your wallet so, create a wallet with a balance and try to avoid clicking on random links as possible.

One of the most common ways I think many people were going on about this is actually creating a burner wallet that is a new wallet to do each airdrops in as much this was working out, testnets and mainnet airdrops now have this criteria of your wallet having some certain amount of transactions and some certain amount of funds on it before you become eligible, this in their own view to curb Sybil and make it transparent. So a new wallet doesn’t work. But what I usually say is you can have a wallet you use for airdrops and that which is for saving your funds and definitely the latter should be a cold wallet.

Also it should be custom to actually disconnect your wallet from a website immediately you are done with it, although this doesn’t still guarantee it is save because the first connection might have exposed it to the hacker of it is scam website

[RockBell]

Yeah Im not sure if they put noticed with that considering phamtom is one of the biggest used wallet im the solana wallet. I think they are the number 1 in terms of usage. Cause even me, Im using their wallet if ever I used solana, good thing is I didnt check my wallet during that time and escape this tragic scenario.

Phantom wallet have a lot of when it comes to phishing attacks And when you go to Google, there are a lot of fake phantom wallet, but if you don't pay attention to whatever you are doing, you were virtually full victim of scammers, and a part of the reasons why  goggle needs to pay attention to the kind of apps they bring to the platform because sometimes a side fake apps  there are so many copyrights applications so one have to be very careful because these days a lot of apps have a lot of fake reviews.

And if I'm not mistaken, Phantom wallet is one of the biggest solar wallet that people use when it comes to anything concerning  Solana chain But the fact that there are too many apps that are after peoples money or finding a way to hack them It's affecting the trust that people are for the wallet and the team have to start understanding that they have a lot of  battles to face because of all this  fake apps.

Because even these days that you'll be able to tell if a fake or not through the review, but I got to understand that there are also fake reviews currently so you don't even know which one is real.

[khaled0111]

...

Well.. you look like a pro-Solana..it would be great if you explain how they can download and install it the propper way...
In general, it doesn’t matter from where you have downloaded it if you have verified its authenticity. However, it’s advised to always dowlnload files from the official websites but what you must really do is to verify the files’ signatures if available. When you do that, you can be sure you didn’t download a fake copy.

[Mia Chloe]

I am wondering how a wallet are still vulnerable to hackers to be able to bring up fake extension update. This happened on Phantom wallet recently.
Anyone that updated the wallet will be taken to where the person can put his seed phrase. This is how the seed phrase will be seen by the hackers and be used to steal the coins on the wallet.
https://x.com/realScamSniffer/status/1887509151557034058

Phantom is a full time online wallet and I don't actually fancy that. Basically majority of persons in the crypto ecosystem I've come across that make use of it are actually those who are into meme coins, degen and web3 aside that using it as a hodling wallet is lame plus their security level isn't something I fancy.

I noticed that the most vulnerable wallets are actually wallets that are not open source. That's why you find some many case online of stolen coins and funds via phishing and even fake contracts.

[Obari]

I don't use phantom wallet, so I don't know much about how it works. But I will advice people to use a more secured wallet app as their storage devices.use wallets that has their official pages and when you update them it comes from their source. Though if you go through they a phishing link, you might as well get hacked. The Internet is broad so while doing anything that relates to the safety of our fund, we have to be very careful.

You spoke my mind when you said the internet is broad and frankly the internet is really broad and as an internet user, you just have to be very careful at all times and be very cautious of every activity you carry out and always try to very every information from the direct sources and pages.
Hackers are always busy and very active seeking for whom to devour and any slightest mistake, you’ll be preyed on without mercy and this very consciousness should make us stay very alert and treat every thing on the internet with extra care especially when it has to do with money.

[Alphakilo]

I am wondering how a wallet are still vulnerable to hackers to be able to bring up fake extension update. This happened on Phantom wallet recently.

In 2030, we will still reading about cases of phishing attacks. It is never going to end.
Every wallet is vulnerable and can be hacked. Hackers and those who engineer phishing attacks are upgrading themselves and their knowledge on how to best beat these security and take advantage of their vulnerabilities. And they are having some success at it.

Sometimes it is not even the fault of the wallet holder, when these happens others who were not affected should learn and tell others about it.

[GreatArkansas]

I am wondering how a wallet are still vulnerable to hackers to be able to bring up fake extension update. This happened on Phantom wallet recently.

In 2030, we will still reading about cases of phishing attacks. It is never going to end.
Every wallet is vulnerable and can be hacked. Hackers and those who engineer phishing attacks are upgrading themselves and their knowledge on how to best beat these security and take advantage of their vulnerabilities. And they are having some success at it.

Sometimes it is not even the fault of the wallet holder, when these happens others who were not affected should learn and tell others about it.

That's why it is always good to practice "think twice before you click" in everything. Technology evolves really fast, even how much we can say that Phantom is a good wallet, secure, etc. There will be always other people trying to find some hole or way just to scam people.
For example, if you are already techy, and experienced and encounter this phising, at first you will suspect it but other people especially those who are just starting to explore these things, will for sure fall on this attack.

[HajiBagi]

Any time it asks you to put the seed, especially on an "off site" is a cause for concern.
Yet, many new users are not aware of that unfortunately, so they get hooked. RIP to them

Before the scammers will get access to your wallet they must have a seed phrase and you gave it out to scammers, every wallet is very secure to the extent that if your seed phrase is not linked out the scammers will never get access to your wallet, we have seen many people having many mistakes by giving out their seed phrase in the name of Participating in some website and projects that are not legit, we have seen many people having same mistake every time.

Although some wallets do not look strong to us because we see them like they are not good for securing our coins and using them will cause us a big problem, I want us to know that scammers can scam people in any way because some people are very greedy when it comes to crypto, some people only want the way to double his investment w without no thinking about what will happen to their wallet, sometimes I don't use to blame scammers because when we secure our wallet very and we don't do anything that will affect it nothing will happen to our wallet.

[albon]

Although some wallets do not look strong to us because we see them like they are not good for securing our coins and using them will cause us a big problem, I want us to know that scammers can scam people in any way because some people are very greedy when it comes to crypto, some people only want the way to double his investment w without no thinking about what will happen to their wallet, sometimes I don't use to blame scammers because when we secure our wallet very and we don't do anything that will affect it nothing will happen to our wallet.

Regardless of the wallet that each person uses, the risk lies in the suspicious sites that a person may encounter in the airdrop space, on Google, or through pop-up windows that often request wallet connections and transaction signatures. This step is like falling into a trap set by scammers to steal the wallet and its assets.

Many of us may discover this tactic that OP mentioned at first glance, but there are newcomers in this field for whom such scams may appear more advanced and complex... That’s why it is always important to check the legitimacy of the links they connect their wallets with and it is better to use new wallets. Also, the most important advice is to ignore any site or platform or any signature message that asks for the seed phrase. These seed phrases should never be shared with anyone and must be stored offline. Additionally, financial temptations and unrealistic offers should be ignored. We hope that through our advice, beginners will remain safe

[sokani]

Phantom is a full time online wallet and I don't actually fancy that. Basically majority of persons in the crypto ecosystem I've come across that make use of it are actually those who are into meme coins, degen and web3 aside that using it as a hodling wallet is lame plus their security level isn't something I fancy.

I noticed that the most vulnerable wallets are actually wallets that are not open source. That's why you find some many case online of stolen coins and funds via phishing and even fake contracts.

Phantom wallet is open source. If you do a Google search, almost all the articles rate it as the number one solana wallet. And it's kind of worrying how hacker exploited an error in the code to create malicious pop up in the original wallet that could trick user into entering their seed phrase. I've also checked their news channels to see if this security breach was reported or has been fixed and I got nothing. I know it's only noobs that would fall for this kind of scam but it's quite disturbing.

[Mia Chloe]

Phantom wallet is open source. If you do a Google search, almost all the articles rate it as the number one solana wallet. And it's kind of worrying how hacker exploited an error in the code to create malicious pop up in the original wallet that could trick user into entering their seed phrase. I've also checked their news channels to see if this security breach was reported or has been fixed and I got nothing. I know it's only noobs that would fall for this kind of scam but it's quite disturbing.

Scammers actually don't categorically target noobs it's more like a random kind of try and error situation till they eventually get a noob that falls for their schemes and hacks . It's very difficult to manage online wallet these days especially if you are being targeted.

Like are you for real..? I've read some articles in the past that suggested it was actually closed source that was why I mentioned it was closed source. Nevertheless It's possible I'm wrong but I'll definitely do a little research about the app. And by the way you can have my last smerit.

[Ojima-ojo]

Phantom is a full time online wallet and I don't actually fancy that. Basically majority of persons in the crypto ecosystem I've come across that make use of it are actually those who are into meme coins, degen and web3 aside that using it as a hodling wallet is lame plus their security level isn't something I fancy.

I noticed that the most vulnerable wallets are actually wallets that are not open source. That's why you find some many case online of stolen coins and funds via phishing and even fake contracts.

Phantom wallet is open source. If you do a Google search, almost all the articles rate it as the number one solana wallet. And it's kind of worrying how hacker exploited an error in the code to create malicious pop up in the original wallet that could trick user into entering their seed phrase. I've also checked their news channels to see if this security breach was reported or has been fixed and I got nothing. I know it's only noobs that would fall for this kind of scam but it's quite disturbing.

Most times hacking involves insider efforts to be successful, so whenever any platform gets hacked you should know that an insider is involved and for sure it was only as successful as the insider's access, aside from insider involvement we can have developers planting such malicious malware in the source code giving access to the code and being able to exploit it at whatever time.


So regardless what the size of the company or its reputation if hackers want to work on such a platform, they take whatever time available to plan and execute their plans at an asap rate.

[Peanutswar]

One of the recent trends right now after the metamask with the Ethereum network is the Solana which with the use of the phantom wallet, this is the reason why ideal to use a burner wallet which use for transactions only like buying and selling of NFT and not as main wallet because there's a lot of project there or even group just accumulate number of participants and once they join in the project through connecting the wallet they will experience immediately drains the wallet reason to get compromise the account worst case so better to have this than worrying much with your money.

[taufik123]

Regardless of the wallet that each person uses, the risk lies in the suspicious sites that a person may encounter in the airdrop space, on Google, or through pop-up windows that often request wallet connections and transaction signatures. This step is like falling into a trap set by scammers to steal the wallet and its assets.
-snip-

Such a phishing method is used by scammers to trap their victims, so they fall into a trap that has been created for victims to connect their ghost wallets.
Methods like this continue to be developed by scammers, they try harder to reach their potential target so that more ways will be done.

Seeing a lot of pop-up ads that appear on some websites and some ads that look official but in fact are just a trap,
because many are found on many social media, because scammers can pay ads to spread their traps.

-snip-
It's very difficult to manage online wallet these days especially if you are being targeted.

Then don't use an online wallet that doesn't have a double key, you just use it with a hardware wallet and it's more secure.
Although some loopholes can be used such as Social Engineers who will take advantage of the user's carelessness to get the Seed Phrase they save,
but of course the use of Hardware wallets is still the best at this time.

[ImThour]

These scammers are just way ahead and are finding new ways to scam people every single day. Solana being the hype due to the memecoins, they decided to scam Phantom but I think the chances of you putting your whole seed phrase is way low, but any newbie or beginner will fall for this right away if they are trying to buy the shit coin made by their favorite celebrity in a hurry.