Singapore Entrepreneur Loses Entire Crypto Portfolio After Downloading Fake Game
Singapore-based entrepreneur Mark Koh, founder of RektSurvivor, lost his entire crypto portfolio, valued at approximately $14,189, after downloading a malware-infected beta launcher for the MetaToy online game. Despite Norton antivirus flagging suspicious activity and Koh reinstalling Windows 11, the malware drained all software wallets connected to Rabby and Phantom browser extensions within 24 hours.
Koh had accumulated his cryptocurrency over eight years, with the loss amounting to about 100,000 yuan. Investigators have attributed the attack to a combination of authentication token theft and a Google Chrome zero-day vulnerability. Multiple attack vectors were involved, including a malicious scheduled task.
Koh has advised removing seed phrases from browser-based hot wallets when not in use and, if possible, using private keys to limit risk to derivative wallets. He filed a police report in Singapore, which was confirmed by authorities via Lianhe Zaobao.
Another Singaporean victim named Daniel indicated that the scammer believed he was still trying to download the launcher, suggesting a broader targeting operation. This MetaToy exploit reflects wider cybercrime trends, such as fake AI tools, fake Captchas, malicious Ethereum code pull requests, and previous GitHub repository tactics used to reconfigure banking malware, according to McAfee.
