On December 25, Scam Sniffer issued a security alert. Users reported that accessing a Singaporean news portal would be redirected to a fake URL for Pudgy Penguins. Investigation revealed that this was part of a larger malicious advertising campaign. The principle of the attack is as follows:
The malicious ads are served via the Google ad network; the ads load suspicious code from Adloox; the code checks if you have a web3 wallet and, if detected, redirects to Pudgy Penguins' fake website.
The attack currently only targets Pudgy Penguins users, but this method could easily be adapted to other projects, and users are reminded to be sure to double-check the URL.
Precautions: Enable an ad blocker; use a separate browser for encrypted activities; double-check URLs before connecting to your wallet; install browser security extensions.