Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/legohomepagefakelegocoinscam.php}} {{Unattributed Sources}} Modified LEGO HomepageOn October 4th, the Lego homepage displayed an advertisement for a new cryptocurrency called the Lego coin. This was a scam coin, and was fairly obvious because the attackers didn't invest any time in creating a convincing landing page or trading history for their token, the Leg..."

2024-11-06T21:52:43Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/legohomepagefakelegocoinscam.php}} {{Unattributed Sources}} thumb|Modified LEGO HomepageOn October 4th, the Lego homepage displayed an advertisement for a new cryptocurrency called the Lego coin. This was a scam coin, and was fairly obvious because the attackers didn't invest any time in creating a convincing landing page or trading history for their token, the Leg..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/legohomepagefakelegocoinscam.php}}
{{Unattributed Sources}}

[[File:Legocoin.jpg|thumb|Modified LEGO Homepage]]On October 4th, the Lego homepage displayed an advertisement for a new cryptocurrency called the Lego coin. This was a scam coin, and was fairly obvious because the attackers didn't invest any time in creating a convincing landing page or trading history for their token, the Lego community was quick to announce it, and the Lego website had the update removed within an hour and a half. A few people fell for it with small investments, which are likely unrecoverable.<ref name="ztbrickstwitter-16595" /><ref name="cointelegraph-16596" /><ref name="puppyluver01twitter-16597" /><ref name="reddit-16598" /><ref name="thebrickfan-16599" /><ref name="sdrawvtwitter-16600" /><ref name="tormentaloustwitter-16601" /><ref name="tormentaloustwitter-16602" /><ref name="redditold-16603" />

== About LEGO ==
"In March 2021, the toy manufacturer’s X account hinted it may have been moving into the nonfungible token space when it hashtagged “#NFT” in a 14-second clip of a 3D LEGO brick rotating in space. However, the post was removed soon after.

LEGO Group’s holding company KIRKBI did, however, invest $1 billion in video game publisher Epic Games to accelerate its Metaverse plans in April 2022."

"Our new LEGO Coin is officially out! Buy the new LEGO Coin today and unlock secret rewards!"

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"the homepage of toy manufacturer LEGO Group was hacked on October 5th local time, briefly displaying a "LEGO Coin" token scam."
{| class="wikitable"
|+Key Event Timeline - LEGO Homepage Fake LEGO Coin Scam
!Date
!Event
!Description
|-
|October 4th, 2024 7:00:00 PM MDT
|Approximate Awareness Lego Team
|According to a statement by Lego moderator mescad, this is approximately when the moderation team first became aware of the information posted on the site.
|-
|October 4th, 2024 7:34:00 PM MDT
|ZTBricks Notices Announcement
|ZTBricks posts on Twitter to note about the information being present on the site, including screenshots.
|-
|October 4th, 2024 7:53:27 PM MDT
|Thread Posted On Reddit
|One of the moderators of the Lego Reddit community named mescad posts a warning about the cryptocurrency scam posted on the main site. They keep the community updated throughout the ordeal and warn them to change passwords.
|-
|October 4th, 2024 8:15:00 PM MDT
|Official Removal Of Link
|According to a timeline from moderator mescad on the Lego subreddit, the link is offline now.
|-
|October 4th, 2024 8:23:00 PM MDT
|Link Confirmed Offline
|Twitter user tormentalous reports that the link is removed from the site.
|-
|October 5th, 2024 9:00:33 PM MDT
|CoinTelegraph Article Published
|CoinTelegraph publishes an article about the Lego website exploit.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"According to a report by Cointelegraph, the homepage of toy manufacturer LEGO Group was hacked on October 5th local time, briefly displaying a "LEGO Coin" token scam. The fraudulent token was present on the LEGO Group's website for approximately 75 minutes before being removed."

"Toy manufacturer LEGO Group has reportedly removed a "LEGO Coin" token scam that briefly appeared on its homepage after being hacked on Oct. 5, reports state.

X user and LEGO enthusiast “ZTBricks” was among the first to spot the scam, which promised “secret rewards” to those who bought LEGO Coin, several screenshots on X show"

"Hey @LEGO_Group someone popped your site and changed the main page! It directs to a crypto site to an account that is almost definitely not you guys!"

"On 5 October 2024 (October 4 evening in the US), an unauthorised banner briefly appeared on LEGO.com. It was quickly removed, and the issue has been resolved. No user accounts have been compromised, and customers can continue shopping as usual. The cause has been identified and we are implementing measures to prevent this from happening again."

== Ultimate Outcome ==
“The issue has been resolved. No user accounts have been compromised, and customers can continue shopping as usual.”

"Lego told Engadget that no user accounts were compromised and that it has identified the cause of the issue. It also said that it was implementing measures to prevent anything similar from happening again in the future. However, the company has declined to share details about that "cause" or the measures it's implementing."

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="ztbrickstwitter-16595">[https://twitter.com/ztbricks/status/1842377730618241187 @ztbricks Twitter] (Accessed Nov 5, 2024)</ref>

<ref name="cointelegraph-16596">[https://cointelegraph.com/news/lego-removes-crypto-token-scam-from-homepage https://cointelegraph.com/news/lego-removes-crypto-token-scam-from-homepage] (Accessed Nov 5, 2024)</ref>

<ref name="puppyluver01twitter-16597">[https://twitter.com/puppyluver01/status/1842648781675700508 @puppyluver01 Twitter] (Accessed Nov 5, 2024)</ref>

<ref name="reddit-16598">[https://www.reddit.com/media?url=https%3A%2F%2Fpreview.redd.it%2Fz1n9oj1amusd1.jpeg%3Fwidth%3D1320%26format%3Dpjpg%26auto%3Dwebp%26s%3D954c0b2cc212eb662f54df3fce53319a1df01171 https://www.reddit.com/media?url=https%3A%2F%2Fpreview.redd.it%2Fz1n9oj1amusd1.jpeg%3Fwidth%3D1320%26format%3Dpjpg%26auto%3Dwebp%26s%3D954c0b2cc212eb662f54df3fce53319a1df01171] (Accessed Nov 5, 2024)</ref>

<ref name="thebrickfan-16599">[https://www.thebrickfan.com/lego-shop-hacked-by-crypto-scam/ LEGO Shop Hacked by Crypto Scam - The Brick Fan] (Accessed Nov 5, 2024)</ref>

<ref name="sdrawvtwitter-16600">[https://twitter.com/SDraw_V/status/1842394664143335776 @SDraw_V Twitter] (Accessed Nov 5, 2024)</ref>

<ref name="tormentaloustwitter-16601">[https://twitter.com/tormentalous/status/1842390057828966785 @tormentalous Twitter] (Accessed Nov 5, 2024)</ref>

<ref name="tormentaloustwitter-16602">[https://twitter.com/tormentalous/status/1842382176572317880 @tormentalous Twitter] (Accessed Nov 5, 2024)</ref>

<ref name="redditold-16603">[https://old.reddit.com/r/lego/comments/1fwfp1z/legocom_hacked_by_crypto_scammers/?rdt=53595#lightbox https://old.reddit.com/r/lego/comments/1fwfp1z/legocom_hacked_by_crypto_scammers/?rdt=53595#lightbox] (Accessed Nov 5, 2024)</ref></references>

LEGO Homepage Fake LEGO Coin Scam - Revision history