PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Popular NFTs were stolen in a massive wave of Discord hacks

hackenproof.com | blog | #web3 | #phishing | #social-engineering | #discord | #scam | #nft
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A wave of Discord server compromises behind NFT phishing thefts: scammers posted fake 'claim free land' links and drained hundreds of NFTs from BAYC, Otherside and other projects.
Published
Collected

Related coverage

blog · netspi.com
Adding Web Content Filter Exceptions for Phishing Success
Describes how attackers can submit phishing domains to web content filter categorization services so corporate filters whitelist the sites, improving success rates in phishing engagements.
blog · netspi.com
All You Need Is One – A ClickOnce Love Story
ClickOnce deployment, built for easy Windows app installs, doubles as a phishing vector: one click can grant a malicious payload temporary admin privileges, controlled by registry trust settings.
blog · netspi.com
Malicious MobileConfigs
A phishing email delivering a .mobileconfig profile can reroute iOS devices through an attacker proxy, install malicious MDM, and capture HTTP/HTTPS traffic or domain credentials via Burp.
blog · netspi.com
Backdooring Office Documents
Describes embedding a Base64 Meterpreter payload in an Office VBA macro so a legitimate emailed document can be re-sent as a backdoor after harvesting domain credentials.
research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
Back