Lazarus Group, a well-known notorious cybercrime organization, has been linked to a recent phishing attack against the former executive at Animoca Brands. Animoca is a blockchain gaming and digital property company.

According to the details shared, this hack caused the former executive, Medhi Farooq, to lose funds from six different crypto wallets. This attack, like every other one linked to the Lazarus Group, shows the rising threat that advanced cyber-criminals continue to make, especially towards crypto funds.

The hack started when Farooq got a Telegram message from Alex Lin, someone he considered an acquaintance, asking to catch up. Farooq then innocently sent his Calendly link to set up a meeting. The next day, just before the call, Lin got another message again, saying they needed to switch to Zoom Business for compliance reasons because a mutual contact named Kent would also join. 

According to Farooq, the Zoom meeting looked real, and there was almost no real reason to raise his suspicion. He added that he had seen Kent and Alex, but there was no sound during the call. In the chat, they said there were technical problems and told Farooq to update his Zoom app. 

After he installed the fake update, he saw that six of his crypto wallets and almost half of his life savings were emptied. Later, he found out that Lin’s account had been compromised. The entire setup was eventually linked to Lazarus, a North Korean hacking group.

Many across the crypto community have sympathized with him, offering him different kinds of help and also warning others about the possible dangers their accounts stand to have if they’re not properly protected; others have warned about the recent ‘zoom’ methods cybercriminals use to drain wallets.