A sophisticated phishing campaign is currently targeting users of Phantom, the popular Solana-based cryptocurrency wallet, by exploiting fake update notifications. <\/p>\n\n\n\n
Web3 security platform Scam Sniffer revealed that attackers are connecting to legitimate Phantom wallets and presenting users with fraudulent “update extension” signature requests designed to steal private keys.<\/p>\n\n\n\n
The scammers’ methodology involves creating convincing pop-ups that closely mimic Phantom’s authentic interface. When users encounter these deceptive prompts, they’re asked to enter their seed phrase under the guise of a system update or connection request. Scam Sniffer,on January 31 announced<\/a> that \u201cScammers are creating FAKE Phantom popups on malicious websites to steal seed phrases.\u201d He further explained how users can identify fake pop ups as he warned users never to enter their recovery phrase on any website as Phantom never asks for it during connections.<\/p>\n\n\n\n