Solana Phantom security update NFTs push password-stealing malware
Hackers are airdropping NFTs to Solana cryptocurrency owners pretending to be alerts for a new Phantom security update that lead to the installation of password-stealing malware and the theft of cryptocurrency wallets. This ongoing attack started two weeks ago, with NFTs titled 'PHANTOMUPDATE.COM'. Phantom requires all users to update their wallets. This must be done as soon as possible," reads the warning in the fake Phantom update NFT. "Failing to do so, may result in loss of funds due to hackers exploiting the Solana network. Visit www.updatePhantom.com to get the latest security update.". When the batch file is launched, it will check if it is running with Administrator privileges and, if not, show a Windows UAC prompt asking for permissions.
Source
https://t.me/nftsdefifinance
