Welcome Bonus: Sign Up & Get Up to $150 in BTC

Get Started
Crypto users report new wave of Discord NFT scams Crypto users report new wave of Discord NFT scams

Crypto users report new wave of Discord NFT scams

Malicious actors have started using compromised QR codes to hijack users' accounts.

Crypto users report new wave of Discord NFT scams

Cover art/illustration via CryptoSlate

Scammers have reportedly found a new way to compromise usersโ€™ Discord accounts โ€” including those on servers related to cryptocurrencies and non fungible-tokens (NFTs) โ€” by hijacking QR codes used for logging in.

According to pseudonymous crypto enthusiast Serpent, malicious actors โ€” disguised as Discordโ€™s verified bot called Wickโ€”are now reaching out to users to offer a collaboration, potential employment, or some other enticing opportunities. But thereโ€™s a catch โ€” to continue the discussion, scammers ask users to verify via a QR code.

This is because Discord has an option to log in using a special QR, bypassing two-factor authentication. In reality, however, โ€œscammers are using Chrome drivers to open the login page, get the QR code image, then send it to the Discord bot, asking people to verify themselves,โ€ Serpent explained.

If a user scans such a code, bad actors can instantly log into their account and snatch their Discord token, a unique series of numbers and letters that is created when people connect to the app. If this happens, users need to reset their passwords as soon as possible.

Why is it dangerous?

While access to a Discord account won’t directlyย endanger someone’s crypto or NFTs, such security breaches are still dangerous and can enable to all manner of cyberattack vectors.

For example, malicious QR codes can be used to add newโ€”and potentially suspiciousโ€”contacts to usersโ€™ lists. Further, such codes also allow to connect victimsโ€™ devices to the hackerโ€™s network, automatically initiate phone calls as well draft emails and send text messages. Not to mention that such QR codes can reveal usersโ€™ locations and initiate fraudulent payments.

As CryptoSlate reported, cyberattacks have been picking up steam on Discord lately. Notably, not only regular users but major crypto companies are being hacked as well.

On April 1, for example, the Discord server of the famous Bored Ape Yacht Club NFT collection was compromised by hackers.

At the time, the hacker gained access to the Discord server that hosts Bored Ape Yacht Club, Mutant Ape Yacht Club, and Mutant Ape Kennel Clubโ€”all three NFT collections from Yuga Labs.

Apart from Yuga Labs, Discord servers of other NFT projects, such as Nyoki Club and Shamanzs NFT, were also hacked that day.

Posted In: Hacks, NFTs, Scams