Scam Sniffer: URL redirection attack detected against Pudgy Penguins users

On December 25th, Scam Sniffer released a security alert stating that some users reported being redirected to a fake Pudgy Penguins website when accessing a certain Singaporean news portal. Further investigation revealed that this was part of a larger malicious advertising campaign. The attack works as follows:

Malicious ads are delivered through the Google advertising network; the ads load suspicious code from Adloox; the code checks if you have a web3 wallet; if detected, you are redirected to the fake Pudgy Penguins website.

Currently, the attack is only targeting Pudgy Penguins users, but this method can easily be applied to other projects. Users are advised to carefully check the URL.

Preventive measures include enabling ad blockers, using a separate browser for encrypted activities, carefully checking the URL before connecting to a wallet, and installing browser security extensions.