Scam Sniffer issued a security alert, and some users reported that visiting a Singapore news portal would redirect to a fake URL of Pudgy Penguins. After investigation, it was found that this was part of a larger malicious advertising campaign. The principle of the attack is as follows:
Malicious ads are delivered through the Google advertising network; ads load suspicious code from Adloox; the code checks whether you have a web3 wallet; if detected, it redirects to the fake website of Pudgy Penguins.
Currently, the attack is only aimed at Pudgy Penguins users, but this method can easily be applied to other projects, reminding users to check the URL carefully.
Precautions: Enable ad blockers; use a separate browser for crypto activities; carefully check the URL before connecting the wallet; install browser security extensions.