- A recent email phishing attack has targeted OpenSea, a significant NFT marketplace.
- Two of the attacks are a phony NFT offer and a phony risk alert for developer accounts.
- Another OpenSea user posted on Reddit, expressing confusion about the ongoing phishing campaign.
A recent email phishing attack has targeted OpenSea, a significant nonfungible token (NFT) marketplace. The attackers are using malicious links that they send through email while pretending to be the marketplace.
Two of the attacks are a phony NFT offer and a phony risk alert for developer accounts. An email about an OpenSea developer’s API key purported to be a phishing attempt, claiming that OpenSea’s developer contacts had been compromised.
OpenSea NFT users
Users are advised not to click on links they don’t trust by OpenSea, which has maintained that the platform has not been hacked. Another OpenSea user posted on Reddit, expressing confusion about the ongoing phishing campaign.
They mentioned that they are receiving three to four scam/phishing emails every day, which is absurd considering they received none at all only a few weeks ago. This news was released a few weeks after a security incident involving one of OpenSea’s third-party vendors revealed details about user API keys.
OpenSea has acknowledged receiving phishing emails in the past. In February 2022, the company confirmed that its platform was the target of an external phishing attack and advised users not to click on any links within the emails.