PANews reported on January 4th that, according to Cryptopolitan, an advanced phishing attack targeting Cardano users is spreading by distributing announcements masquerading as the "Eternl Desktop" wallet, tricking users into downloading and installing a malicious MSI file containing remote control tools. Attackers are using an official tone and referencing NIGHT and ATMA token incentives, distributing an unsigned installer via the domain download.eternldesktop.network. Security researchers revealed that the file contains a LogMeIn Resolve component, enabling remote command execution and persistent system control. Users are advised to obtain wallet software only through official channels.


