TechFlow, June 19 — According to Cointelegraph, Mehdi Farooq, investment partner at cryptocurrency venture firm Hypersphere, lost a significant portion of his savings in a sophisticated phishing attack. The attacker initiated a Telegram message impersonating someone he knew, Alex Lin, and scheduled a Zoom meeting. Prior to the meeting, the attacker requested switching to Zoom Business for "compliance reasons," claiming another acquaintance would also join.
During the meeting, Farooq encountered audio issues and was instructed to update his Zoom software, after which his system was compromised. Within minutes, the attacker drained six of his wallets, taking what he described as "years of savings." Farooq later discovered that the real Alex Lin's account had been hijacked, and the attack was linked to the North Korea-associated threat group "dangrouspassword."
