Scam Sniffer: Malicious Google ad campaign redirects crypto users to fake Pudgy Penguins website

Blockchain security experts have uncovered a new scam using malicious Google ads to trick crypto users into visiting a fake Pudgy Penguins website.

A new scam targeting crypto users has been uncovered, with analysts at blockchain security firm Scam Sniffer warning that bad actors are seemingly exploit Google‘s ad network to post malicious ads.

In an X thread on Wednesday, the analysts explain that malicious ads contain suspicious JavaScript code that checks if the viewer has a crypto wallet. If a wallet is detected, the code redirects users to a fake website that mimics the legit website of Pudgy Penguins, a non-fungible token collection of 8,888 unique tokens depicting chubby cartoon penguins.

🚨 URGENT SECURITY ALERT 🚨

1/6 A user reported being redirected to a fake @pudgypenguins website through a Singapore news portal. Our investigation revealed this is part of a larger malicious advertising campaign. pic.twitter.com/Izv3f87WrX

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) December 25, 2024

Once users are redirected to the fake website, scammers could steal personal information or lure victims into connecting their wallets, allowing unauthorized access to withdraw funds.

You might also like: Trader loses $800k in crypto to malicious Google Chrome extension

The current target of the scam is Pudgy Penguins users, but Scam Sniffer has warned that this method could easily be adapted to target other crypto projects as well. The security experts advise crypto investors to always carefully check website URLs to avoid falling for similar scams. To stay safe, Scam Sniffer recommended using ad blockers, considering a separate browser for web3 activities, and double-checking URLs before connecting a wallet.

The latest scam is part of a larger trend where bad actors exploit Google Ads to deceive crypto users. In one instance, scammers mimicked the Revoke Cash recovery service by using fraudulent ads that redirected users to a fake site designed to steal funds. In another case, Google Ads were used to promote a fake version of the Whales Market crypto platform, redirecting users to a fraudulent site where their wallets were compromised.

Read more: Ireland’s deputy PM wins legal action against Google over fake crypto ads

Source