The Lazarus Group, linked to North Korea, has launched a sophisticated cyber attack targeting cryptocurrency investors through a fake NFT game called “DeTankZone,” exploiting a vulnerability in Google Chrome to steal sensitive information. https://t.co/hrTWNgXnuT
Lazarus Group’s NFT Game Heist: A Play-to-Earn Scam Unleashed Another day, another Lazarus exploit -this time through a fake NFT game called DeTankZone that exploited a zero-day in Chrome to swipe wallet credentials. The game wasn’t just a throwaway; they went full stealth… https://t.co/LqMTZ0QzN5
North Korean Hackers Target Americans With NFT Game The Lazarus Group launched a fake NFT game, DeTankZone, infecting users by exploiting a Chrome zero-day flaw. They set up a play-to-earn system with real gameplay to lure in unsuspecting players. They marketed this trap… https://t.co/TX03W1e4b4

The Lazarus Group, a hacking collective linked to North Korea, has initiated a sophisticated cyber attack targeting cryptocurrency investors through a fake NFT game named 'DeTankZone.' This fraudulent game promised players the opportunity to drive NFT tanks and earn rewards, but it was primarily designed to exploit a zero-day vulnerability in Google Chrome. The attack involved the remote code execution (RCE) attack embedded in the game's index.tsx files, allowing the hackers to steal sensitive wallet credentials from unsuspecting users. The scheme has raised significant concerns regarding the security of online platforms and the potential for similar attacks in the future.


