Fraudulent Blur Airdrop Websites Steal $300K

TrustCheck, an Ethereum-based Web3 browser security extension, has reported that scammers have been targeting users with malicious links to fake airdrops.

Blur is a newcomer to the NFT marketplace, and its innovative three-phase airdrop incentive program has attracted a substantial user base. The second phase of the airdrop, which distributed tokens based on trading activity, has prompted a surge of users seeking to claim BLUR tokens. Scammers have exploited this trend by disseminating fraudulent airdrop links to pilfer funds.

TrustCheck has identified 24 scam websites that have stolen funds from unsuspecting users since February 15, 2023. These fake websites use smart contracts that automatically prompt transactions when users connect their wallets. All ETH from the wallet is drained to a specific address, allowing TrustCheck to track the amount stolen to date.

Tools like TrustCheck can help identify suspicious websites and transactions, warning users of potential fake websites and smart contracts. Despite reports of NFT wash trading, data analytics suggest that Blur’s NFT trading volumes are legitimate.

Fake websites and phishing attacks are common across the internet, with scammers continuing to exploit Web3 functionality to drain funds. In February 2023, a phishing wallet address linked to a URL masquerading as the ETHDenver conference website has stolen over $300,000 to date. Similarly, in late 2022, scammers targeted FTX investors with phishing websites after the collapse of the cryptocurrency exchange.

As the NFT ecosystem continues to grow, it is important for users to exercise caution and use security tools to protect their assets from potential scams. TrustCheck and other Web3 browser security extensions can help identify suspicious activity and prevent funds from being stolen by scammers.