HashDit, a web3 security firm, has issued a warning on X about a newly detected fake Telegram group targeting users of Pudgy Penguins. The deceptive group is leading unsuspecting members to a malicious Safeguard bot, which, once interacted with, presents significant risks, including the potential loss of control over personal devices and theft of cryptocurrency assets.
Clicking the "verify" button in the fraudulent Safeguard App triggers a deceptive process that poses serious security threats. "This process secretly injects malicious PowerShell code into your clipboard. When executed, it downloads and runs malware, compromising your system and crypto wallets," HashDit warned.
