Slow fog: Be alert to the risk of “zero yuan purchase” phishing for the Blur NFT market

It is reported that recently, Scam Sniffer, the partner of Slow Fog Ecological Security, demonstrated a “zero yuan purchase” phishing attack test against the Blur NFT market’s batch listing signature. Through a “root signature” as shown in the figure, all NFTs authorized by the target user on the Blur platform can be fished out at a very low cost (specifically “zero yuan purchase”). The “root signature” format of the Blur platform is similar to “blind signature”, The user cannot recognize the impact of this signature. The slow fog security team verified the feasibility and harmfulness of the attack. All users of the Blur platform are hereby reminded to be vigilant. When finding “Root signature” from a non-Blur official domain name (blur. io), they must refuse it to avoid potential asset losses.

Interpretation of this information:

In recent news, it has been reported that Scam Sniffer, the partner of Slow Fog Ecological Security, conducted a phishing attack test against the Blur NFT market’s batch listing signature. The test demonstrated that through a “root signature,” all NFTs authorized by the target user on the Blur platform can be fished out at a very low cost, specifically a “zero yuan purchase.” The “root signature” format of the Blur platform is similar to a “blind signature,” and the user cannot recognize the impact of this signature. The slow fog security team verified the feasibility and harmfulness of the attack and now wants to remind all users of the Blur platform to remain vigilant.
It is imperative that all users be aware of the potential danger of “Root signature” from non-Blur official domain names (blur.io). To avoid potential asset loss, any “Root signature” from a non-Blur official domain name should be refused.

In this message, we can understand that the Slow Fog Ecological Security team is warning users of the Blur NFT market of a phishing attack perpetrated by Scam Sniffer. The attack exploits a “root signature” format, which can retrieve all NFTs authorized by the target user on the Blur platform at a very low cost. The “root signature” is similar to a “blind signature,” and the user is unable to recognize its impact on their account.

This message is a reminder to the users of the Blur platform to be aware of the potential danger of “root signature” attacks from non-Blur official domains. This threat could potentially result in significant asset losses. In conclusion, three vital keywords that summarize this message are Phishing Attack, Root Signature, and Vigilance.