Security News > 2023 > March > Sandbox blockchain game breached to send emails linking to malware
The Sandbox blockchain game is warnings its community that a security incident caused some users to receive fraudulent emails impersonating the game, trying to infect them with malware.
The Sandbox is a blockchain-based open-world multiplayer game with over 350,000 active monthly users, offering them ways to build, own, and monetize interactive content like virtual worlds, items, and experiences.
According to the February 26th security incident notice, an attacker hacked an employee of The Sandbox to gain access to several email addresses belonging to the company.
Next, the attacker leveraged this access to send emails to users that appeared to come from The Sandbox, containing links to malware hosted at another site.
The impact of the incident for each user depends on whether or not the recipients of the emails clicked on the hyperlinks and installed malware on their computers.
As the threat actor now has a list of Sandbox users, all emails from the game should be inspected to ensure that links only go to the legitimate website located at https://sandbox.