News linked to both this project and an event.
According to SlowMist founder Cos (@evilcos), a new bookmark phishing attack targeting the FOMO web platform has recently emerged. Attackers spoof human verification pages to trick users into dragging malicious JavaScript code into their browser favorites to create a "bookmark". After clicking the bookmark two or three times, previously logged-in FOMO accounts are hijacked, and the associated crypto assets are promptly drained. This technique is essentially a legacy exploitation method targeting @privy_io. Because the bookmark executes JavaScript under FOMO's own domain, active logged-in sessions are directly exposed, eliminating the need for users to click on phishing links. Relevant attack samples and the attacker's wallet addresses have been preserved, and the SlowMist team will publish a detailed disclosure in due course. Security Advisory: • Any prompt requesting "drag code into favorites" constitutes a phishing attempt; do not execute it. • If you have been compromised, in addition to immediately transferring your assets, you must forcefully terminate all active sessions for your FOMO account. Simply changing your password will not resolve the issue.
Odaily News Aave posted on the X platform stating that it has taken note of the attack on the CowSwap frontend, but this incident has not affected the security of the Aave interface or the underlying protocol. As a precautionary measure, the CowSwap team has temporarily disabled the swap endpoints for integrators. Within the Aave interface, transactions have been switched to the ParaSwap routing where available to ensure continuity of user transactions.