Blockchain developer has lost $1 million in cryptocurrency due to fake Zoom

IS analysts have noted an increase in malware-assisted theft of digital assets

24.12.2024 - 13:25

3 min

What’s new? A blockchain developer under the nickname lsp8940 has shared an incident on his X account in which he lost more than $1 million in cryptocurrency after installing a fake Zoom calling app. According to the victim, the hacker wrote to him in X, introducing himself as the head of a startup, after which he offered to discuss the details of the project’s development and sent a link to a Zoom meeting.

Source: X.com

What else is known? The developer writes that after clicking on the link, a notification was displayed that the app needed to be updated to work correctly. He approved the update, after which he discovered that all funds from the wallet had been withdrawn and were not recoverable.

Yu Xian, the founder of blockchain audit company SlowMist under the nickname Evilcos, urged users to carefully check Zoom’s meetup links, as hackers use them to disguise malware. He emphasized that clicking on a Zoom meeting link should automatically launch the Zoom client if the app was previously installed on the device.

Source: X.com

IS company Scam Sniffer noted an increase in the number of cases of crypto wallet private key theft using malware. Developers urged to carefully check download sources and run security checks before installing apps.

Source: X.com

In November, Scam Sniffer also reported a case of a hacker stealing millions of dollars worth of GIGA meme tokens similarly. Then a hacker sold a large volume of coins at once, which led to a collapse of the exchange rate.

Radiant Capital hacker moves $52 million worth of stolen cryptocurrencies

PeckShield reported that this is the first stage of money laundering before moving them to a crypto mixer

Back in September, analysts at Binance, the largest exchange, announced a global problem of malware spreading to replace transaction addresses. Clipper-type programs intercept data from the clipboard and replace it with the addresses of attackers’ wallets.

Author: