The attack was reported by various sources, including decentralized finance channel DeFiPrime which stated that its platform was compromised by suspicious pop-ups.
In a follow-up message, CoinGecko said that its investigation pointed to crypto ad platform Coinzilla as the source of the phishing attack code.
Similarly, DexTools, another crypto-focused app site also blamed the crypto ad platform as the cause of the phishing attack.
"We are disabling all ads until the situation is clarified by @adsbycoinzilla. Please be aware and don't sign suspicious requests at your wallet. DEXTools does not automatically request any permissions," wrote DexTools in its tweet.
The pop-up window prompted users to connect their MetaMask wallets to use on the site including disseminated malicious links to popular NFT projects such as the Bored Ape Yacht Club.
The dubious domain, however, had been taken down at the time of writing.