{"id":2956,"date":"2021-08-25T18:27:08","date_gmt":"2021-08-25T12:57:08","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=2956"},"modified":"2021-08-25T18:27:10","modified_gmt":"2021-08-25T12:57:10","slug":"how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/","title":{"rendered":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs?"},"content":{"rendered":"\n
OpenSea users are being targeted in a recent and aggressive Discord phishing attack to steal cryptocurrency funds and NFTs. Over the past week, threat actors have been lurking in OpenSea’s Discord server, pretending to be official support representatives for the site.<\/p><\/p>\n\n\n\n
These fake support reps provide private “support” to OpenSea a user needing help, which invariably leads to the loss of cryptocurrency and NFT collectibles stored in the victim’s MetaMask wallets.<\/p><\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n
What is the Working Process of Fake OpenSea Scam?<\/strong><\/h2>\n\n\n\n
When an OpenSea user requires support, they can request help at OpenSea\u2019s help center or through the site\u2019s Discord server. When a user joins the Discord server and posts a request for help, scammers hiding on the server-initiated sending a private message to the user. These messages include an invite to an \u2018OpenSea Support\u2019 server to receive support, as shown below.<\/p><\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n
An Artist Jeff Nicholas, who fell abused by this scam, told our experts that after joining the fake OpenSea support server, the scammer asked him to launch a screen share so that they provide support and guidance in fixing the problem.<\/p><\/p>\n\n\n\n
\u201cLots of grooming, processing through the issue\u201d pulling you in. then ask you to screen share so they can see what you are seeing,\u201d Nicholas told our experts. As part of this process, the fake support member states to the victim that they require to resynch their MetaMask Chrome extension with the MetaMask mobile app.<\/p><\/p>\n\n\n\n
“Say you require to resync you MM and at this point your sort of sticked in to fixing this thing whatever it is. Pull up QR code and it immediately says \u201csynced\u201d (because they scanned it). So then they basicly have your seed phrase (without actually having it),” explained Nicholas.<\/p><\/p>\n\n\n\n
To synch your mobile MetaMask wallet with your Chrome extension, it is the potential to go to Settings and click on Advanced then tap Sync with mobile. You will be prompted to enter your password on this page, and a QR code will be displayed.<\/p><\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n
The Mobile MetaMask Application can scan this QR Code to sync and import your Chrome wallet automatically. However, any user who sees this QR code, consisting of the fake support reps, can create a screenshot and then utilize that image to sync your wallet into their mobile applications.<\/p><\/p>\n\n\n\n
When the fake support representatives scanned the QR code on their mobile application, they now had full access to the cryptocurrency and any NFT collectibles preserved within it. The threat actors then transmit the victims to their wallets.<\/p><\/p>\n\n\n\n
What should the users of OpenSea do?<\/strong><\/h2>\n\n\n\n
OpenSea is aware of the attacks and suggests that users only open support requests to their help centers. \u201cSaddened to listen an OpenSea users was the victim of a significant phishing attack last night,\u201d tweeted by OpenSea\u2019s Head of Product Nate Chastain.<\/p><\/p>\n\n\n\n
“The scammer masquerades as an OpenSea employee and has the user scan a QR code granting wallet access.” “Please be attentive and direct support requests through our Help Center\/ZenDesk.” However, some users feel that OpenSea transmits some responsibility for these attacks as they have been referring users to their Discord server for support. <\/strong><\/p><\/p>\n\n\n\n
Our experts have contacted OpeanSea with questions about these attacks and the proper way to request support but have not heard back, For now, it is highly suggested that OpenSea users bypass Discord or Twitter for support and only launch tickets through the site\u2019s help center. <\/strong> <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
OpenSea users are being targeted in a recent and aggressive Discord phishing attack to steal cryptocurrency funds and NFTs. Over the past week, threat actors have been lurking in OpenSea’s Discord server, pretending to be official support representatives for the site. These fake support reps provide private “support” to OpenSea a user needing help, which […]<\/p>\n","protected":false},"author":2,"featured_media":2961,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"yoast_head":"\n
How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"OpenSea users are being targeted in a recent and aggressive Discord phishing attack to steal cryptocurrency funds and NFTs. Over the past week, threat actors have been lurking in OpenSea’s Discord server, pretending to be official support representatives for the site. These fake support reps provide private “support” to OpenSea a user needing help, which […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-25T12:57:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-25T12:57:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs?\",\"datePublished\":\"2021-08-25T12:57:08+00:00\",\"dateModified\":\"2021-08-25T12:57:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\"},\"wordCount\":588,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Breaches\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\",\"url\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\",\"name\":\"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-08-25T12:57:08+00:00\",\"dateModified\":\"2021-08-25T12:57:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/","og_locale":"en_US","og_type":"article","og_title":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited","og_description":"OpenSea users are being targeted in a recent and aggressive Discord phishing attack to steal cryptocurrency funds and NFTs. Over the past week, threat actors have been lurking in OpenSea’s Discord server, pretending to be official support representatives for the site. These fake support reps provide private “support” to OpenSea a user needing help, which […]","og_url":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-08-25T12:57:08+00:00","article_modified_time":"2021-08-25T12:57:10+00:00","og_image":[{"width":1000,"height":525,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image2.jpg","type":"image\/jpeg"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs?","datePublished":"2021-08-25T12:57:08+00:00","dateModified":"2021-08-25T12:57:10+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/"},"wordCount":588,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Breaches"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/","url":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/","name":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs? - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-08-25T12:57:08+00:00","dateModified":"2021-08-25T12:57:10+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/how-this-fake-opensea-support-staff-is-hijacking-crypto-wallets-and-nfts\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How this Fake OpenSea Support Staff is Hijacking Crypto wallets and NFTs?"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2956"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=2956"}],"version-history":[{"count":1,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2956\/revisions"}],"predecessor-version":[{"id":2962,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2956\/revisions\/2962"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/2961"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=2956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=2956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=2956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image1\"](\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image1.jpg\")
<\/figure><\/div>\n\n\n\n![\"How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image2\"](\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image3-1024x405.jpg\")
<\/figure><\/div>\n\n\n\n![\"How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image3\"](\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/How-this-Fake-OpenSea-Support-Staff-is-Hijacking-Cryptowallets-and-NFTs-image4-1024x762.jpg\")
<\/figure><\/div>\n\n\n\n