RUG.TOOLSMalicious bookmark phishing campaign reportedly drains Fomo user assets
What was reported
SlowMist reported that a phishing page reached through a MOONLET token listing on Fomo instructed a user to add a malicious browser bookmark. Embedded JavaScript allegedly extracted Fomo login tokens from browser storage, enabling the reported transfer of about $48,000 in assets without wallet connection or seed-phrase entry.
Why it matters
The incident shows that embedded-wallet accounts can be targeted through browser-session theft rather than conventional on-chain approvals or seed-phrase capture.
Evidence and limitations
- SlowMist attributes the report to assistance provided to a Fomo user.
- The source says the malicious bookmark read browser storage and transmitted Fomo login tokens.
- The source reports approximately $48,000 in assets were transferred.
- No supported blockchain is explicitly identified in the supplied material.
Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to SlowMist; they are not presented as deterministic Rug.Tools findings.
Original source
Source publication time:
Read SlowMistThis report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.