Scammers have devised a scheme to steal cryptocurrencies using Labubu

Scammers have launched a phishing website calling for participation in an airdrop

Scheme for hacking crypto wallets using the Labubu token has appeared on the network

11.08.2025 - 13:45

498

2 min

What’s new? Specialists from the Russian information security company F6 have discovered a new phishing scheme targeting cryptocurrency users. Scammers are using the well-known toy brand Labubu to attract potential victims.

Material by RBC

What else is known? As part of the scheme, the scammers have developed a phishing website where users are invited to participate in a Labubu token airdrop.

Free coin distribution is a common practice in the cryptocurrency space. Such events are often hosted by projects in the early stages of development to attract an initial audience, as well as by large platforms to reward active participants and stimulate the further growth of their ecosystems.

In application-based airdrops, wallet connection is required — this procedure allows project developers to distribute coins among eligible participants.

To participate, users must have a wallet on a specific blockchain that supports the token. For security reasons, it is recommended to create a new wallet rather than using your main one, which stores all your assets. It is also necessary to study information about the project on social networks and thematic forums.

Unlike legitimate projects, scammers use airdrops as a pretext to gain access to users’ wallets.

For example, in the scheme discovered by F6, scammers use a phishing website to encourage users to connect their wallets to participate in the distribution of Labubu coins.

The procedure is as follows: first, the website requests access to the wallet balance and transaction history data. This allows it to assess whether there are funds in the potential victim’s wallet.

If there is money, the website requests additional permissions, ostensibly to confirm participation in the promotion. Such approval launches malware such as a drainer, which empties the wallet and transfers the assets to the scammers’ accounts.

Author: