SlowMist Cosine: Beware of Bookmark Phishing Attacks Targeting the FOMO Web Interface for Crypto Theft

According to SlowMist founder Cos (@evilcos), a new bookmark phishing attack targeting the FOMO web platform has recently emerged. Attackers spoof human verification pages to trick users into dragging malicious JavaScript code into their browser favorites to create a "bookmark". After clicking the bookmark two or three times, previously logged-in FOMO accounts are hijacked, and the associated crypto assets are promptly drained. This technique is essentially a legacy exploitation method targeting @privy_io. Because the bookmark executes JavaScript under FOMO's own domain, active logged-in sessions are directly exposed, eliminating the need for users to click on phishing links. Relevant attack samples and the attacker's wallet addresses have been preserved, and the SlowMist team will publish a detailed disclosure in due course. Security Advisory: • Any prompt requesting "drag code into favorites" constitutes a phishing attempt; do not execute it. • If you have been compromised, in addition to immediately transferring your assets, you must forcefully terminate all active sessions for your FOMO account. Simply changing your password will not resolve the issue.