Scammers ran malicious Google ads for Terra ecosystem projects, impersonating Anchor and Astroport. Users were redirected to fake sites where they entered seed phrases after connecting wallets, allowing attackers to drain 52 wallets totaling $4.31M between April 12-21.