Slow Mist: Malicious bookmark script targeting friend.tech may steal user passwords and funds

Odaily News Slow Mist issued a reminder on the X platform that malicious scripts targeting friend.tech (ft) have recently appeared. This is a JavaScript code that scammers trick potential victims into adding as a (browser) bookmark. When a user visits the ft site and executes this bookmark, the malicious script attempts to steal their password and the token associated with Privy, the embedded wallet used by ft. This means that users’ ft accounts and related funds are at risk of being stolen. This is not a new technology. This malicious bookmark has often been used in previous schemes to target Discord accounts.