Crypto Investor Falls for Elaborate Social Engineering Trap
We may earn commissions from affiliate links or include sponsored content, clearly labeled as such. These partnerships do not influence our editorial independence or the accuracy of our reporting. By continuing to use the site you agree to our terms and conditions and privacy policy.
A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.
The scam, which unfolded through a fake Zoom call, highlights the increasing precision of social engineering tactics targeting professionals in the digital asset space.
Mehdi Farooq revealed that the incident began when he received a seemingly harmless message from a familiar name on Telegram. The impersonator, posing as someone Farooq had previously interacted with, arranged a meeting and later switched to Zoom Business, citing compliance reasons. The attackers cleverly added another trusted name to increase credibility.
Once on the Zoom call, Farooq was prompted to install an “audio fix” update after encountering sound issues. That update turned out to be malware. Within minutes, hackers accessed his system, drained six crypto wallets, and continued chatting via Telegram as if nothing was wrong.
Farooq later confirmed the original Telegram account had been compromised. He linked the attack to a group associated with North Korea, known online as “dangrouspassword.”
This case joins a growing list of incidents involving high-level crypto professionals. Just weeks earlier, scammers sent fake Ledger-branded letters via USPS to trick users into scanning phishing QR codes. In another case, $330 million worth of BTC was stolen from an elderly victim using a similar phishing approach.
Experts warn that as crypto matures, sophisticated cyber threats targeting insiders are becoming the norm—not the exception.
Commentaries 
Fill in necessary fields and publish