Unknown hackers hacked the website of the Danish construction kit manufacturer LEGO Group, publishing a phishing link to a platform for selling a fraudulent Lego Coin token for ether.

The attackers gained unauthorized access to the Lego website on October 4 and posted a banner depicting gold coins with the company logo. Hackers on behalf of the company announced the “official launch” of the Lego Coin token, promising “secret rewards” for those who buy the coin. Users who clicked the “Buy Now” button under the attackers’ message were redirected to a phishing site.

The banner hung on the Lego website for at least 75 minutes. Only after that the company’s specialists were able to remove the fake banner and links. Lego executives said no user accounts were compromised and customers can continue shopping as normal. Security specialists have identified the cause of the problem, and the designer manufacturer is now taking measures to prevent similar incidents in the future, the company assured. But they did not specify the details of the hack.

In March 2021, Lego management hinted at its willingness to issue non-fungible tokens with the hashtag #NFT in a 14-second clip of a 3D LEGO brick spinning in space. However, the company soon deleted the tweet.

Last year, Lego revealed plans to create its own metaverse with the support of Epic Games, the creator of the online game Fortnite.