Web3 game developers are facing a new wave of scams. A recent incident involved a developer receiving a direct message from a deactivated Twitter account, @ameliachicel.
The message proposed a Solidity developer position for a web3 game, MythIsland. The website provided, mythisland[.]io showcased the game with detailed graphics and functional links, creating an illusion of legality.
The scam gained resistance when 0xMario, a freelance developer and victim, shared his experience on Twitter. Many users reported similar misleading practices, indicating a widespread issue.
These scammers utilized professional-looking websites and social media profiles to enhance their credibility. The scam progressed onto Telegram, where detailed conversations about the job and game occurred.
The developer was then asked to download a game launcher to test an alpha version of MythIsland. Exercising caution, the developer used a virtual Windows machine for this purpose. Despite appearing legitimate, the launcher prompted an error message related to the .NET Framework.
Upon reporting this issue, the scammers advised using a different Windows machine. However, the same error occurred, leading the scammers to erase all communications and block the developer.
Understanding the potential risks, the developer treated his equipment as compromised and planned to clean it thoroughly. This incident serves as a reminder of the importance of caution in downloading files, especially executables and scripts.
Blockchain security firms advise using virtual machines or expendable computers for such activities and prefer secure methods like Google Docs for document transfers.