A bizarre cyberattack involving the hacked Instagram account of hip-hop group Migos has surfaced, allegedly as part of an attempted extortion scheme aimed at Solana co-founder Raj Gokal.
On May 27, the compromised account began publishing a series of now-deleted posts that appeared to show images of Gokal holding government-issued IDs, including a passport and driver’s license. Captions suggested a failed demand for “40 BTC,” hinting at a ransom Gokal allegedly refused to pay.
One post also purported to show Gokal’s wife holding identification, while others contained what seemed to be private contact details such as phone numbers and email addresses.
The photos resembled those commonly used in Know Your Customer (KYC) verifications, though it remains unclear how the images were obtained or whether they are authentic.
The posts were widely interpreted as an attempt to publicly pressure Gokal following unsuccessful efforts to access his digital accounts. Just a week earlier, Gokal warned via X (formerly Twitter) that attackers were targeting his email and social profiles, urging caution over suspicious activity.
Both Gokal and the Solana Foundation have yet to issue a public response regarding the incident. The situation mirrors other recent high-profile account hacks, including one involving McDonald’s Instagram, which was used to promote a memecoin scam.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.
Russia’s attempt to formalize its crypto mining sector is falling short, with most miners opting to remain off the books despite new regulations.
A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.