A phishing website claiming to offer a Pokémon-branded NFT card game has been spreading malware to unsuspecting gamers, a cybersecurity firm has warned.
The website, which at the time of writing was still online, also claims to offer an NFT marketplace, with a link to buy tokens, and even an area to stake NFTs — all based on the popular Japanese media franchise.
However, an arm of the South Korean cybersecurity firm AhnLab warned the public about the website on Jan. 6, noting that instead of downloading a game, users were actually downloading a remote access tool that allows hackers to take control of their device.
The tool, known as NetSupport Manager, would allow the attackers to remotely control the computer’s mouse and keyboard, access the system’s file management and history and even execute commands allowing them to install additional malware, the firm warned.
The public has been advised to only purchase or download applications from official websites and not open attachments in suspicious emails.