In Brief
- A fake website claiming to be part of the Pudgy Penguins‘ Pudgy World game is attempting to steal cryptocurrency wallet passwords.
- The phishing site, pudgypengu-gamegifts[.]live, mimics real crypto wallet interfaces to deceive users, especially those new to the Pudgy World game.
- Due to the high risk of phishing which accounted for significant cybercrime losses in 2024, users are urged to only use official sites and verify all URLs carefully.
Phishing Alert Issued for Pudgy World Browser Game
A cybersecurity warning has been issued by Malwarebytes Labs about a phishing website that is impersonating the new Pudgy World browser game, aiming to steal users’ cryptocurrency wallet passwords. The fraudulent website, identified as pudgypengu-gamegifts[.]live, utilizes deceivingly authentic wallet interfaces to trick users into entering their secure information.
Stefan Dasic, a senior malware research engineer at Malwarebytes, commented on the sophistication of the phishing attempt, noting, “The phishing site abuses that step: When a visitor selects their wallet on this fake site, it shows what appears to be that wallet’s own unlock screen. To the user, it looks for all the world like the real crypto wallet software they already trust.”
Rising Concern Over Crypto-Related Scams
According to data from the FBI’s Internet Crime Complaint Center (IC3), phishing and spoofing scams were responsible for over 193,407 complaints in 2024 alone, with reported losses exceeding $70 million. The Pudgy World game, tied to the popular Pudgy Penguins NFT brand, involves features that often require players to connect their cryptocurrency wallets. This integration provides an angle which scammers have exploited, targeting new users who may be less familiar with standard security practices.
The launch of Pudgy World has been met with enthusiasm, allowing players to explore virtual environments, customize avatars, and complete quests. However, this has also made it an attractive target for cybercriminals.
Details on Pudgy Penguins and Pudgy World
Since its acquisition by CEO Luca Netz in 2022, Pudgy Penguins has evolved from a simple NFT collection into a wide-ranging consumer brand that now includes retail products and games. Despite recent success, the brand witnessed a decrease in its market value compared to its peak in December 2024.
Recommendations for Users
Malwarebytes has urged users to only interact with verified and official websites. They recommend using trusted bookmarks and avoiding any links from questionable sources like social media or direct messages. They also stress the importance of legitimate wallet interactions, explaining that real wallet password prompts should not appear embedded in webpage contents.
Users who suspect they might have entered their credentials into a fraudulent site are advised to change their wallet passwords immediately and consider transferring their funds to a new wallet to mitigate any potential compromise. In light of this incident and previous scams targeting the brand, vigilance in digital transactions remains critical.
