The official Twitter account of Ethereum NFT collection Gutter Cat Gang, and its co-founder's account, were hacked, resulting in the loss of at least $750,000.
The Gutter Cat Gang Twitter Expressed Regret for the Incident
The official Twitter account of Ethereum NFT collection Gutter Cat Gang, and its co-founder's account, were hacked, resulting in the loss of at least $750,000.
The hacker tweeted a phishing link to a fake airdrop of “GutterMelo,” a legitimate collection that was launched last month. This drained connected wallets, with at least 87 NFTs, including a Bored Ape that sold for $125,000 in September 2021, stolen from 16 users, with one address losing 36 NFTs overall.
The Gutter Cat Gang Twitter expressed regret for the incident, said they are collaborating with law enforcement, and were taking action to stop a similar attack from happening in the future. No compensation plans were mentioned.
Despite being hacked, Gutter Cat Gang insists that it has been utilizing "multi-factor authentication and security measures." The team allegedly employed SMS authentication, which is susceptible to SIM swap attacks, according to crypto sleuth ZachXBT.
In a SIM swap attack, the hacker convinces the phone provider that the victim's phone has been misplaced, and that the victim's phone number needs to be moved to a new SIM card. After being moved, they can make and receive phone calls and SMS messages. In this instance, Twitter enables password resets through text message to the user's phone. Following the SIM switch, the hacker exploited this to take control of the Twitter account.
