Decentraland, a METAVERSE site, is currently under a phishing attack. Malicious hackers have cloned Decentraland’s website. This elaborated scheme method attracts naïve users, forcing them to hand up secret keys and mnemonics. Although this site is primarily focused on the Ethereum blockchain, users with TRUST, METAMASK, and FORTMATIC wallets – which hold other blockchain tokens – are at risk if they attempt to connect with the false site.
Fortmatic is a simple web3 wallet that works similarly to Metamask. However, it enables users to log in to Ethereum-based applications using just their phone number or email address without needing a browser extension.
Decentraland has its website whereas, the scammers, on the other hand, run a website with the following URL:https://decentralnd.icu/connect/play.html
The Ethereum blockchain powers Decentraland, a decentralised virtual reality network. Users may create, enjoy, and monetise their content and applications on the Decentraland platform.
The phishing website provides customers with the opportunity to Explore LANDS they own to see beautiful vistas and architecture, much like the legitimate platform asserting it is “From a space adventure to a mediaeval dungeon maze to entire villages crafted from the minds of community members.”
LAND, a non-fungible digital asset held in an Ethereum smart contract, is the name of Decentraland’s finite, traversable, 3D virtual environment. The land is separated into parcels with cartesian coordinates to identify them (x,y). Community members hold these parcels in perpetuity, and they are acquired with MANA, Decentraland’s cryptocurrency token. This allows users complete control over the surroundings and programmes they design, ranging from simple 3D scenarios to highly involved apps and games.
The clone website has the same programmes to offer, and it encourages visitors to “expand the boundaries of their creativity” by doing so. Using the easy Builder tool, create scenarios, artworks, challenges, and more, compete in events to win prizes.
The website claims to provide the tools to fill the world with social games for more experienced creators, and in exchange, you must connect your wallet.
If you give someone access to your wallet, you’re subjecting your cryptos to threat actors, who will most likely empty your wallet. And there are few, if any, options for obtaining them back.
There is very little to almost no information regarding the platform’s legitimacy and accountability. Unlike the official project, where the white paper contains a detailed explanation of the original philosophical motivations for the Decentraland project and a thorough discussion of the proposed technical and economic approaches to building Decentraland, the white paper is missing from this phishing act.
Every time you click on any of the website’s options, whether it’s to look at the docs or to join the discord channel, the clone site will prompt you to connect your wallet, as shown below:
The Real initiative, on the other hand, redirects to legitimate data such as this:
Cloned websites generally have URLs that are identical to the actual website URL; for example, the phishing site displays “decentralnd” (https://decentralnd.icu/connect/play.html), when the genuine project is “https://decentraland.org/.”
The scammers have done an excellent job replicating the official Decentraland project’s icons, illustrations, and user interface.
Phishing attempts, in which you must enter your login credentials from the originating website, are the most popular hoaxes and can be challenging to detect.