{"id":7715,"date":"2026-03-23T05:33:36","date_gmt":"2026-03-23T05:33:36","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=7715"},"modified":"2026-03-23T05:33:36","modified_gmt":"2026-03-23T05:33:36","slug":"fake-pudgy-world-site-lures-gamers-into-handing-over-crypto-wallet-passwords","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=7715","title":{"rendered":"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords"},"content":{"rendered":"<p><\/p>\n<div id=\"blockquote-block_10ef48aa9d149db0f78ff03cbb6de4b7\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Malwarebytes researchers discovered a phishing site impersonating Pudgy Penguins&#8217; new Pudgy World game, deploying 11 wallet-specific unlock screen forgeries covering Ethereum, Solana, and multi-chain wallets.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">The fake site at pudgypengu-gamegifts[.]live tricks hardware wallet users into typing seed phrases through a &#8220;manual option&#8221; fallback when the spoofed connection flow fails.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Pudgy Penguins has now been targeted by phishing campaigns twice since December 2024, as FBI data shows phishing complaints exceeded 193,000 in 2024 with losses topping US$70 million.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>A phishing campaign targeting players of Pudgy Penguins\u2019 Pudgy World game has been identified days after the title\u2019s launch on March 10, using a fake website to steal cryptocurrency wallet credentials.<\/p>\n<p>Cybersecurity firm Malwarebytes said the site mimics legitimate wallet connection flows used for in-game items and digital collectibles.&nbsp;<\/p>\n<p>Hosted at pudgypengu-gamegifts[.]live, the page includes 11 tailored wallet interfaces designed to imitate different providers, indicating a coordinated and resource-intensive setup.<\/p>\n<div id=\"blockquote-block_9647027a51813b8188ae49b5d481fd1d\" class=\"blockquote-container variant-personal\">\n<div class=\"blockquote-text\">\n<p>The practical consequence of all this is that automated scanning tools are likely to rate the initial page as benign, because on their infrastructure, it behaves like one. The malicious functionality never loads unless the attacker\u2019s server decides the visitor is worth targeting.<\/p>\n<\/div>\n<div class=\"blockquote-attribution\">\n        <img decoding=\"async\" src=\"https:\/\/cdn.cryptonews.com.au\/2026\/03\/23152621\/Stefan-Dasic-Malwarebytes-Labs.png\" class=\"author-image\">        Stefan Dasic, Malwarebytes Labs.    <\/div>\n<\/div>\n<p><strong>Related: US Senate Eyes April Vote on Landmark Crypto Market Structure Bill<\/strong><\/p>\n<p>No public response has been issued by Pudgy Penguins or Igloo Inc.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-hardware-wallet-trap\">Hardware Wallet Trap<\/h2>\n<p>The attack focuses on extracting seed phrases, particularly from hardware wallet users. When the spoofed connection process fails, users are redirected to a manual input option that requests recovery credentials, which are then captured by the attackers.<\/p>\n<p>The site also includes evasion mechanisms to avoid detection. It checks for virtual machines, automated analysis tools, and other research environments.&nbsp;<\/p>\n<p>If such conditions are detected, the malicious components do not load, limiting exposure to security investigators.<\/p>\n<p>This is not the first phishing campaign linked to Pudgy Penguins, though. In December 2024, a separate operation used malicious Google Ads and embedded scripts to identify crypto wallets before redirecting users to fraudulent pages.<\/p>\n<p>The Pudgy Penguins NFT collection, managed by Igloo Inc, has declined significantly in value. Its floor price has fallen 88.3% from 36.33 ETH in December 2024 to 4.10 ETH, or about US$8.5K (AU$12K).<\/p>\n<p>Phishing remains a persistent risk across crypto platforms (and basically everywhere on the internet). FBI data for 2024 recorded 193,407 phishing and spoofing incidents, with reported losses exceeding US$70 million (AU$107 million).<\/p>\n<p><strong>Related: Kalshi Slams Arizona Charges as \u2018Overstep\u2019 in Prediction Market Showdown<\/strong><\/p>\n<p>The post Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords appeared first on Crypto News Australia.<\/p>\n<p>Crypto Wallets,Gaming,Pudgy Penguins#Fake #Pudgy #World #Site #Lures #Gamers #Handing #Crypto #Wallet #Passwords1774244016<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malwarebytes researchers discovered a phishing site impersonating Pudgy Penguins&#8217; new Pudgy World game, deploying 11 wallet-specific unlock screen forgeries covering Ethereum, Solana, and multi-chain wallets. The fake site at pudgypengu-gamegifts[.]live tricks hardware wallet users into typing seed phrases through a &#8220;manual option&#8221; fallback when the spoofed connection flow fails. Pudgy Penguins has now been targeted<\/p>\n","protected":false},"author":1,"featured_media":7716,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[62,2746,3503,3504,3502,3505,3500,3501,159,117],"class_list":{"0":"post-7715","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bitcoin","8":"tag-crypto","9":"tag-fake","10":"tag-gamers","11":"tag-handing","12":"tag-lures","13":"tag-passwords","14":"tag-pudgy","15":"tag-site","16":"tag-wallet","17":"tag-world"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=7715\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords\" \/>\n<meta property=\"og:description\" content=\"Malwarebytes researchers discovered a phishing site impersonating Pudgy Penguins&#8217; new Pudgy World game, deploying 11 wallet-specific unlock screen forgeries covering Ethereum, Solana, and multi-chain wallets. The fake site at pudgypengu-gamegifts[.]live tricks hardware wallet users into typing seed phrases through a &#8220;manual option&#8221; fallback when the spoofed connection flow fails. Pudgy Penguins has now been targeted\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=7715\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-23T05:33:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.cryptonews.com.au\/2026\/03\/23152621\/Stefan-Dasic-Malwarebytes-Labs.png\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=7715\",\"name\":\"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg\",\"datePublished\":\"2026-03-23T05:33:36+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=7715\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=7715#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=7715","og_locale":"en_US","og_type":"article","og_title":"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords","og_description":"Malwarebytes researchers discovered a phishing site impersonating Pudgy Penguins&#8217; new Pudgy World game, deploying 11 wallet-specific unlock screen forgeries covering Ethereum, Solana, and multi-chain wallets. The fake site at pudgypengu-gamegifts[.]live tricks hardware wallet users into typing seed phrases through a &#8220;manual option&#8221; fallback when the spoofed connection flow fails. Pudgy Penguins has now been targeted","og_url":"https:\/\/cryptonews.uk.com\/?p=7715","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-03-23T05:33:36+00:00","og_image":[{"url":"https:\/\/cdn.cryptonews.com.au\/2026\/03\/23152621\/Stefan-Dasic-Malwarebytes-Labs.png","type":"","width":"","height":""}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=7715","url":"https:\/\/cryptonews.uk.com\/?p=7715","name":"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg","datePublished":"2026-03-23T05:33:36+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=7715#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=7715"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=7715#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/03\/data-breach-crypto-malware.jpeg","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=7715#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Fake \u201cPudgy World\u201d Site Lures Gamers Into Handing Over Crypto Wallet Passwords"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/7715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7715"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/7715\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/7716"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7715"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}