Cybersecurity firm Malwarebytes has warned of a phishing campaign targeting users of Pudgy Penguins’ newly launched Pudgy World game through a fake website designed to steal crypto wallet credentials.
The malicious site mimics legitimate wallet interfaces, tricking users into entering passwords by displaying realistic unlock screens when they attempt to connect their wallets.
“The phishing site abuses that step: When a visitor selects their wallet on this fake site, it shows what appears to be that wallet’s own unlock screen,”
Said Malwarebytes researcher, Stefan Dasic.
The attack coincides with the recent launch of Pudgy World, a browser-based game that allows users to connect wallets to access in-game items and features, making new users particularly vulnerable.
Phishing remains a major cybercrime vector, with over 193,000 complaints reported to the FBI in 2024, resulting in losses exceeding $70 million.
Researchers said the campaign targets multiple wallet types across Ethereum, Solana and multi-chain ecosystems, suggesting a well-resourced attacker or the use of sophisticated phishing kits.
Users are advised to only access official websites, avoid links from social media or messages, and immediately secure funds if they suspect their wallet credentials have been compromised.
At the time of reporting, Ethereum price was $2,209.78.