SlowMist Cosine: Malicious bookmark script targeting friend.tech may steal user passwords and funds.

BlockBeats reported on October 14th that SlowMist founder Yu Xian posted on social media warning of a recent malicious script targeting friend.tech (ft). The script is a piece of JavaScript code that scammers use to trick potential victims into adding it as a bookmark in their browser. When a user visits the ft website and executes the bookmark, the malicious script attempts to steal their password and tokens associated with the embedded wallet Privy used by ft. This means that users' ft accounts and related funds are at risk of being stolen. Yu Xian warned users to remain vigilant, stating that "this is not a new technique, and this type of malicious bookmark technique has been used extensively in Discord account theft."