Unknown hacker hacked
The official server in Discord, designed for holders of NFT Bored Ape Yacht Club, Mutant Ape Yacht Club and Mutant Ape Kennel Club — the three main collections of Yuga Labs.
According to the information security company PeckShield, the hacker posted phishing links on the Mutant Ape Kennel Club channel in order to trick users into creating fake NFTs.
The Bored Ape Yacht Club (BAYC) team reported that they promptly discovered the problem. The team also urged not to follow the links coming in private messages. “We do not conduct any stealth mines or free April Fools’ giveaways,” BAYC was assured.
It is reported that the hacker could have carried out the attack using Ticket Tool, a popular Discord bot that automatically generates support requests.
Twitter users have warned about a similar vulnerability on the Discord Doodles server, another popular NFT collection, but the Doodles team has not yet commented on the information.
Compromising Discord accounts is a common way to conduct phishing attacks on NFT owners. Just a few weeks ago, the newly launched NFT Rare Bears collection claimed that its members were victims of a similar incident and lost assets worth more than $790,000.