Fake Pokemon NFT game could just give fraudsters access to target devices.
Hackers are utilising the continued popularity of the Pokemon universe and the bizarre rise of non-fungible tokens (NFT) to trick people into installing remote access tools (RAT), take over their devices, and steal any valuables they might find.
Cybersecurity researchers from ASEC recently discovered at least two malicious websites – beta-pokemoncards[.]io, and pokemon-go[.]io pretending to host a Pokemon game that also offers NFT cards that can be traded, eventually for profit.
The websites have since been taken down, but while they were active they had a download button called “Play on PC” that distributed NetSupport.
In theory, NetSupport is legitimate software. It’s built on Windows, and allows cross-platform remote access, giving IT administrators and technicians a way to remotely access various endpoints and fix any potential problems.
