Users of Phantom Wallet, a popular Solana-based crypto wallet, have become the target of a major phishing attack. Scammers use fake pop-ups asking them to confirm an "extension update," which is actually a trap for stealing private keys.

Scam Sniffer analysts found that the attackers connect to real Phantom wallets and display a fake notification, prompting users to sign the request. If the user agrees, the system requires them to enter a SEED phrase, after which the scammers get full access to the wallet and withdraw funds.

To protect against the attack, experts recommend:
-Checking URLs before logging in: real Phantom pop-ups contain "chrome-extension" in the link.
-Use the right mouse click — fake pages often prohibit this action.
-Do not enter a seed phrase under any circumstances.

Phantom Wallet continues to gain popularity: over the past month, the volume of transactions has exceeded 850 million, and the daily income of the wallet amounted to $470,000, which makes it one of the leading among crypto wallets.