LEGO’s website hacked to push cryptocurrency scam

LEGO's website hacked to push cryptocurrency scam

October 7, 2024 at 05:54PM

LEGO website was briefly hacked by cryptocurrency scammers on Friday. The breach lasted 75 minutes, promoting a fake LEGO token purchasable with Ethereum. The scam linked visitors to Uniswap to buy the token. LEGO confirmed the breach, assuring no compromised user accounts and implementing measures to prevent future breaches. The attack was unsuccessful, with only a few purchases made.

Key takeaways from the meeting notes:

– On Friday night, cryptocurrency scammers briefly hacked the LEGO website and replaced the main banner with an image promoting a fake Lego token that could be purchased with Ethereum.
– The breach occurred at 9 PM EST and lasted approximately 75 minutes, until 10:15 PM ET, when the site was restored.
– Unlike many cryptocurrency scams, this one did not promote a malicious site with a crypto drainer that stole assets when connecting a wallet. Instead, it directed visitors to the Uniswap cryptocurrency platform to purchase the LEGO scam token using Ethereum.
– LEGO confirmed the breach but did not share details on how the threat actors gained access to their website. They stated that no user accounts were compromised, and measures are being implemented to prevent such incidents in the future.
– The attack was a failure, with only a few people purchasing the LEGO token for a few hundred dollars.
– It is noted that website breaches are more commonly used to steal customer information and credit cards, rather than for crypto scams.

Let me know if you need further information or a summary of the key action items.

Full Article