Newspaper Twitter account hacked to promote Goblintown phishing scam Newspaper Twitter account hacked to promote Goblintown phishing scam
The hacker behind the goblintown.wtf scam is also responsible for the attack on the Azuki Beanz NFT project.
2 min read
Updated: Jun. 10, 2022 at 12:28 am UTC
Cover art/illustration via CryptoSlate. Image includes combined content which may include AI-generated content.
A Twitter hacker has compromised the account of EL Universal, a Latin American newspaper, to promote a fraudulent goblintown.wtf giveaway, an Ethereum-based non-fungible token (NFT) project, on-chain analyst @NFTherder unveiled.
Maybe someone should tell the Latin American Newspaper Association that one of their newspaper's @ElUniversal twitter account was hacked on June 4th and has been spamming Goblingtown scam nft tweets ever since. I mean, they only have 5 million followers … pic.twitter.com/rP55MEdDZo
— OKHotshot (@NFTherder) June 9, 2022
The attacker changed El Universalโs Twitter name to goblintown.wtf, but left the username, @ElUniversal, intact. Additionally, the malicious actor linked a phishing URL to the account, hoping to steal from unwitting goblintown.wtf holders. The URL swaps the N in town with M.
According to @NFTherder, the attacker took control of El Universalโs account – which has 5.1 million followers – on June 4. Since then, the hacker has posted fraudulent tweets, promising to airdrop an additional 10,000 Goblins.
The goblintown.wtf collection has 9,999 NFTs, with the cheapest going for 5 Ethereum (ETH).
While the extent of the attack remains unknown, a Twitter user going by @topshotkief.eth claims to have lost 10 NFTs to the scam. Specifically, the user alleges that the attacker stole two Mutant Ape Yacht Club (MAYC) pieces and eight Cool Cats.
@NFTherder further revealed:
Of course the Goblintowm scam does ApprovalForAll to steal the assets of those that approve. It also seems the wallet responsible for @ElUniversal twitter account hack previously pulled off an Azuki Beanz scam.
After in-depth analysis, the analyst found that the address behind the goblintowm scam and the Azuki Beanz attack is the same.
Attackers continue targeting projects making headlines
This news comes after goblintown.wtf launched on May 22 and quickly rose to the top of NFT charts. Despite being less than a month old, the project has recorded a trading volume exceeding $70 million, according to data from Cryptoslam. Goblintown.wtfโs success comes as flagship NFTs collections like CryptoPunks, BAYC, Meebits, and Mutant Ape continue declining.
The goblintown.wtf scam comes as bad actors continue attacking the NFT space. Earlier this month, an attacker compromised the Discord server of Yuga Labsโ Bored Ape Yacht Club (BAYC) project and stole approximately $355,000 worth of NFTs.
Before this, an exploit on BAYCโs Instagram account resulted in the theft of at least 54 NFTs. This hack came a few days ahead of Yuga Labsโ overhyped metaverse launch.
In May, renowned digital artist Mike Winkelmann – professionally known as Beeple – had his Twitter account hacked. This attack came after Beeple partnered with fashion giant Louis Vuitton to create 30 NFTs.
Mentioned in this article
Author 
Jinia Shawdagor
Jinia is a fintech writer based in Stockholm, Sweden. With years of experience, she has written about cryptocurrency and blockchain for renowned publications such as Cointelegraph, CoinMarketCap, Bitcoinist, Invezz, etc.
Featured Story
Advertise Here
In this article
Ethereum is a decentralized, open-source blockchain platform that enables the creation of smart contracts and decentralized applications (DApps).
OpenSea
OpenSea is a decentralized peer-to-peer marketplace for buying, selling, and trading NFTs.
Bored Ape Yacht Club
Bored Ape Yacht Club, or often colloquially called Bored Ape, is a non-fungible token collection built on the Ethereum blockchain.