Hackers are airdropping NFTs to Solana cryptocurrency owners, pretending to be alerted to a new Phantom security update that leads to the installation of crypto-stealing malware and theft of cryptocurrency wallets.
This ongoing attack began two weeks ago when an NFT called PHANTOMUPDATE.COM or UPDATEPHANTOM.COM issued a warning purporting to be from a Phantom developer. When opening the NFT, wallet owners are informed that a new security update has been released, and they should click the accompanying link or visit the site to download and install it.