Fake Pudgy World site steals your crypto passwords
ID: 2422cef3-0e4e-5a62-848b-d693907cecbc
STIX ID: report--2422cef3-0e4e-5a62-848b-d693907cecbc
Feed Name: Security Boulevard
Threat Score
A phishing campaign impersonating the newly launched Pudgy World browser game (domain: pudgypengu-gamegifts.live) renders convincing in-page fake wallet unlock screens for 11 wallets—including software extensions and a Trezor hardware flow that uses WebUSB—to harvest passwords and seed phrases. The site uses obfuscated loaders and environment checks to evade automated analysis, only fetching the credential-theft payload for likely real users; the report includes the malicious domain IOC and user mitigation steps.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.