A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.
The scam, which unfolded through a fake Zoom call, highlights the increasing precision of social engineering tactics targeting professionals in the digital asset space.
Mehdi Farooq revealed that the incident began when he received a seemingly harmless message from a familiar name on Telegram. The impersonator, posing as someone Farooq had previously interacted with, arranged a meeting and later switched to Zoom Business, citing compliance reasons. The attackers cleverly added another trusted name to increase credibility.
Once on the Zoom call, Farooq was prompted to install an “audio fix” update after encountering sound issues. That update turned out to be malware. Within minutes, hackers accessed his system, drained six crypto wallets, and continued chatting via Telegram as if nothing was wrong.
Farooq later confirmed the original Telegram account had been compromised. He linked the attack to a group associated with North Korea, known online as “dangrouspassword.”
This case joins a growing list of incidents involving high-level crypto professionals. Just weeks earlier, scammers sent fake Ledger-branded letters via USPS to trick users into scanning phishing QR codes. In another case, $330 million worth of BTC was stolen from an elderly victim using a similar phishing approach.
Experts warn that as crypto matures, sophisticated cyber threats targeting insiders are becoming the norm—not the exception.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.