Phantom Galaxies NFT Theft

Attack Details

• Date: November 19, 2023
• Time: 3 AM AEDT
• Location: Phantom Galaxies Discord server
• Victims: 1,571 users
• Amount: 265 ETH (approximately $1.1 million)

Incident Description

A phishing attack on the Phantom Galaxies Discord server resulted in the theft of 1,571 fake NFTs. The attackers used a malware bot to compromise the server’s Admin account’s two-factor authentication, allowing them to ban staff, advisors, and community moderators. The attackers then posted fake announcements claiming a “stealth” NFT minting event, directing users to a fraudulent platform that charged a 0.1 ETH “minting fee.”

Response

• Chairman of Animoca Brands: Warned followers about the fraudulent NFT drop in a tweet at 4 AM AEDT on November 19.
• Animoca Brands: Confirmed the compensation for affected customers in a release on November 24.
• Woodz: Lost $1,000 USD to the attack, realizing they were scammed shortly after minting two