
Zoom Meeting Scam: Crypto Users Fall Prey to Potential Russian-linked Hackers
A recent report by blockchain security firm SlowMist has uncovered a sophisticated phishing campaign targeting cryptocurrency users through fake Zoom meeting links. This scheme has resulted in devastating losses, with millions of digital assets stolen.
The attackers have been using fraudulent domains that mimic the genuine Zoom interface, tricking victims into downloading malicious installation packages. Once executed, the malware prompts users to enter their system passwords, allowing hackers to collect sensitive information such as KeyChain data, browser credentials, and cryptocurrency wallet details.
Further analysis by SlowMist revealed that the malware’s code is a modified osascript script, which extracts and encrypts user data before transmitting it to a hacker-controlled server flagged as malicious by threat intelligence platforms. The server’s IP address was traced to the Netherlands, while monitoring tools and Russian script usage suggest a connection to Russian-speaking operatives.
An on-chain tracking through SlowMist’s MistTrack tool revealed that hackers accumulated over $1 million in stolen assets, which they converted into 296 ETH. Further transfers led to secondary addresses linked to popular cryptocurrency exchanges such as Binance, Gate.io, and MEXC.
The transactions were facilitated by a complex network of smaller wallets, including those tagged “Angel Drainer” and “Pink Drainer.” SlowMist advises users to verify meeting links carefully before clicking, avoid executing unknown software and commands, install antivirus software, and regularly update it.
As the crypto space continues to expand, so do the number of phishing scams. In fact, a recent incident saw a fraudulent work meeting link sent via KakaoTalk result in a loss of $300,000 in cryptocurrency. The malware-compromised funds were transferred to a BingX-associated wallet.
Another blockchain security expert, Scam Sniffer, reported that over $9.4 million was lost to phishing attacks alone in November. This staggering figure highlights the gravity of this issue and underscores the need for heightened awareness and vigilance among crypto users.
Source: cryptopotato.com