Metaverse Sandbox Developer Blocks Employee Accounts Affected By Cyber Attacks

Metaverse Platform The Sandbox. (Photo; Doc. Minerium)

JAKARTA - The metaverse development company, The Sandbox, has just warned users of a security breach through malware attacks. This security breach allows third parties to access multiple email addresses and send misclaimed messages claiming to have originated from the company.

According to The Sandbox's official blog post, a security breach occurred on February 26, when an unauthorized third party managed to gain access to the computer of one of its employees. Then, sending an email entitled "The Sandbox Game (PURELAND) Access" which contains malware hyperlinks. This attack allows the perpetrator to remotely install malware on the user's computer, gives control of the machine as well as access to user's personal information.

Nonetheless, The Sandbox ensures that third-party access is limited to just one employee computer and no other service or account from The Sandbox has been compromised. To address this issue, the company has taken precautions by blocking related employees' accounts and access, reforming employee laptops, and rearranging all associated passwords, including requiring two-factor authentication.

The Sandbox also warns users of possible phishing attacks and urges them not to click on hyperlinks in phishing emails or other suspicious links to prevent malware from installing on their computers. The Sandbox recommends users to strengthen their passwords and implement two-factor authentication.

Currently, The Sandbox has notified all recipients via email, and passwords compromised on employee accounts have been reorganized. The company is also monitoring the situation and working to improve policies and related security practices.

This kind of security breach is nothing new in the cryptocurrency industry. Previously, Trezor and Ledger had also experienced similar attacks. Therefore, it is very important for cryptocurrency users to always be careful and improve the security of their accounts in the way suggested by service providers.