PANews reported on March 19th that, according to Decrypt, cybersecurity firm Malwarebytes Labs warned that a fake website impersonating Pudgy Penguins' newly released game, Pudgy World, is attempting to steal cryptocurrency wallet passwords. The phishing website, pudgypengu-gamegifts[.]live, uses a highly realistic replica of a cryptocurrency wallet interface to deceive users. When visitors select a wallet on the fake website, a seemingly genuine wallet unlock interface is displayed, misleading users into believing it is a trusted cryptocurrency wallet software.

Malwarebytes points out that the timing of this phishing campaign appears to have been meticulously planned, coinciding with the game's launch and a surge of new users. Furthermore, the attack targeted almost all major wallets, suggesting a well-funded threat actor or the use of commercially available phishing toolkits. Users are advised to access the official website only through trusted bookmarks, avoid clicking on social media links, and be wary of wallet password hints appearing on web pages.