Connect with us

Crypto World

The Next Phase of Crypto Hacks May Start With a Video Call

Published

on

Crypto Attack Flow From Social Engineering to Multi-Stage Malware Deployment. Source: Google 

A North Korea–nexus threat actor is enhancing its social engineering playbook. The group is integrating AI-enabled lures into crypto-focused hacks, according to a new report from Google’s Mandiant team.

The operation reflects a continued evolution in state-linked cyber activity targeting the digital asset sector, which saw a notable increase in 2025.

Sponsored

Sponsored

Advertisement

Fake Zoom Call Triggers Malware Attack on Crypto Firm 

In its latest report, Mandiant detailed its investigation into an intrusion targeting a FinTech company in the cryptocurrency sector. The attack was attributed to UNC1069. It is a financially motivated threat group active since at least 2018, with links to North Korea.

“Mandiant has observed this threat actor evolve its tactics, techniques, and procedures (TTPs), tooling, and targeting. Since at least 2023, the group has shifted from spear-phishing techniques and traditional finance (TradFi) targeting towards the Web3 industry, such as centralized exchanges (CEX), software developers at financial institutions, high-technology companies, and individuals at venture capital funds,” the report read.

According to investigators, the intrusion began with a compromised Telegram account belonging to a crypto industry executive. The attackers used the hijacked profile to contact the victim. They gradually built trust before sending a Calendly invitation for a video meeting.

The meeting link directed the target to a fake Zoom domain hosted on infrastructure controlled by the threat actors. During the call, the victim reported seeing what appeared to be a deepfake video of a CEO from another cryptocurrency company. 

“While Mandiant was unable to recover forensic evidence to independently verify the use of AI models in this specific instance, the reported ruse is similar to a previously publicly reported incident with similar characteristics, where deepfakes were also allegedly used,” the report added.

The attackers created the impression of audio problems in the meeting to justify the next step. They instructed the victim to run troubleshooting commands on their device.

Advertisement

Sponsored

Sponsored

Those commands, tailored for both macOS and Windows systems, secretly initiated the infection chain. This led to the deployment of multiple malware components.

Crypto Attack Flow From Social Engineering to Multi-Stage Malware Deployment. Source: Google 
Crypto Attack Flow From Social Engineering to Multi-Stage Malware Deployment. Source: Google 

Mandiant identified seven distinct malware families deployed during the intrusion. The tools were designed to steal Keychain credentials, extract browser cookies and login data, access Telegram session information, and collect other sensitive files. 

Investigators assessed that the objective was twofold: to enable potential cryptocurrency theft and harvest data that could support future social engineering attacks.

Advertisement

The investigation revealed an unusually large volume of tooling dropped onto a single host. This suggested a highly targeted effort to harvest as much data as possible from the compromised individual.

The incident is part of a broader pattern rather than a standalone case. In December 2025, BeInCrypto reported that North Korean-linked actors siphoned more than $300 million by posing as trusted industry figures during fraudulent Zoom and Microsoft Teams meetings.

The scale of activity throughout the year was even more striking. In total, North Korean threat groups were responsible for $2.02 billion in stolen digital assets in 2025, a 51% increase from the previous year.

Chainalysis also revealed that scam clusters tied on-chain to AI service providers show significantly higher operational efficiency than those without such links. According to the firm, this trend suggests a future in which AI becomes a standard component of most scam operations.

Advertisement

With AI tools growing more accessible and advanced, creating convincing deepfakes is easier than ever. The coming time will test whether the crypto sector can adapt its security fast enough to confront these advanced threats.

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Extreme FUD Persists on Social Media Despite BTC’s $60K Dip Recovery

Published

on

FUD Takes Over Crypto Social Media in Retail Selloff: Santiment 


Extreme FUD lingers after Bitcoin’s $60,000 rebound, with bearish social sentiment outweighing bullish posts.

Bitcoin (BTC) slipped back below $67,000 on Wednesday, February 11, extending a volatile stretch that began with last week’s drop to $60,000.

Despite that rebound from the lows, social data shows fear remains elevated, with traders split over whether the worst of the sell-off is over.

Advertisement

Social Sentiment Stays Bearish as Volatility Spikes

Data shared by on-chain analytics firm Santiment shows a high ratio of bearish to bullish posts even after Bitcoin recovered from its $60,000 dip. According to the firm, retail traders seem hesitant to buy at current levels, while larger holders are facing less resistance in accumulating during periods of fear.

Santiment added that, historically, rebounds have often followed spikes in fear, though it did not claim this guarantees a bottom.

Meanwhile, short-term price action is still fragile, with market watcher Ash Crypto reporting that Bitcoin’s fall below $67,000 had liquidated roughly $127 million in long positions within four hours.

At the time of writing, market data from CoinGecko showed BTC trading around the $66,700 region, down about 3% in the last 24 hours and nearly 13% on the week. Over the past 30 days, the flagship cryptocurrency has fallen more than 27%, and it remains 47% below its October 2025 all-time high.

Advertisement

The 24-hour range between $66,600 and $69,900 is a reflection of ongoing intraday swings, while weekly price action has spanned from about $62,800 to $76,500, showing just how unstable conditions are.

You may also like:

Volatility metrics support that view, with Binance data cited by Arab Chain analysts showing that Bitcoin’s seven-day annualized volatility has climbed to around 1.51, its highest reading since 2022. However, 30-day and 90-day measures remain lower at 0.81 and 0.56, suggesting recent turbulence has not yet evolved into a sustained high-volatility regime. According to the analysts, the average true range as a percentage sits near 0.075, which historically has been a compressed level that often comes right before a larger directional move.

Bear Market Comparisons Resurface

An earlier report this week noted that Bitcoin has closed three consecutive weeks below its 100-week moving average, a pattern seen in previous bear markets. CryptoQuant founder Ki Young Ju wrote on February 9 that “Bitcoin is not pumpable right now,” arguing that selling pressure is limiting upside follow-through.

Other commentators, including Doctor Profit, have described the current structure as a wide consolidation range between $57,000 and $87,000, warning that sideways trading could precede another leg lower.

Advertisement

Furthermore, macro data is adding to the cautious tone, with XWIN Research Japan writing that weaker U.S. retail sales and easing wage growth mean that consumption is slowing, which may weigh on risk assets in the short term. The firm also noted a persistently negative Coinbase Premium Gap since late 2025, suggesting there’s weak U.S. spot demand compared to derivatives-driven activity.

Yet not all industry voices are focused solely on price cycles, with WeFi’s Maksym Sakharov saying he believes Bitcoin sentiment will eventually strengthen despite falling prices, but for different reasons than in past rallies.

“I believe Bitcoin sentiment will turn even stronger despite the falling prices, but this time it won’t be only about price or speculation, but also about real adoption,” Sakharov said.

In the meantime, BTC is sitting in a narrow zone between fear-driven pessimism and technical support near $60,000, with traders watching whether high volatility resolves higher or breaks lower in the weeks ahead.

SPECIAL OFFER (Exclusive)

SECRET PARTNERSHIP BONUS for CryptoPotato readers: Use this link to register and unlock $1,500 in exclusive BingX Exchange rewards (limited time offer).

Advertisement

Source link

Continue Reading

Crypto World

Franklin Templeton to Let Tokenized Money Funds Back Binance Trades

Published

on

Franklin Templeton to Let Tokenized Money Funds Back Binance Trades

Global investment manager Franklin Templeton announced the launch of an institutional off‑exchange collateral program with Binance that lets clients use tokenized money market fund (MMF) shares to back trading activity while the underlying assets remain in regulated custody. 

According to a Wednesday news release shared with Cointelegraph, the framework is intended to reduce counterparty risk by reflecting collateral balances inside Binance’s trading environment, rather than moving client assets onto the exchange.

​Eligible institutions can pledge tokenized MMF shares issued via Franklin Templeton’s Benji Technology Platform as collateral for trading on Binance. 

The tokenized fund shares are held off‑exchange by Ceffu Custody, a digital asset custodian licensed and supervised in Dubai, while their collateral value is mirrored on Binance to support trading positions.​

Advertisement

Franklin Templeton said the model was designed to let institutions earn yield on regulated money market fund holdings while using the same assets to support digital asset trading, without giving up existing custody or regulatory protections. 

Related: Franklin Templeton expands Benji tokenization platform to Canton Network

“Our off‑exchange collateral program is just that: letting clients easily put their assets to work in regulated custody while safely earning yield in new ways,” said Roger Bayston, head of digital assets at Franklin Templeton, in the release.​

Franklin Templeton and Binance Collaboration. Source: Franklin Templeton

The initiative builds on a strategic collaboration between Binance and Franklin Templeton announced in 2025 to develop tokenization products that combine regulated fund structures with global trading infrastructure. 

Off‑exchange collateral to cut counterparty risk

​The design mirrors other tokenized real‑world asset collateral models in crypto markets. BlackRock’s BUIDL tokenized US Treasury fund, issued by Securitize, for example, is also accepted as trading collateral on Binance, as well as other platforms, including Crypto.com and Deribit.

Advertisement

That model allows institutional clients to post a low-volatility, yield‑bearing instrument instead of idle stablecoins or more volatile tokens.

Other issuers and venues, including WisdomTree’s WTGXX and Ondo’s OUSG, are exploring similar models, with tokenized bond and short‑term credit funds increasingly positioned as onchain collateral in both centralized and decentralized markets.

Related: WisdomTree’s USDW stablecoin to pay dividends on tokenized assets

Regulators flag cross‑border tokenization risks

Despite the trend of using tokenized MMFs as collateral, global regulators have warned that cross‑border tokenization structures can introduce new risks. 

Advertisement

The International Organization of Securities Commissions (IOSCO) has cautioned that tokenized instruments used across multiple jurisdictions may exploit differences between national regimes and enable regulatory arbitrage if oversight and supervisory cooperation do not keep pace.

Cointelegraph asked Franklin Templeton how the tokenized MMF shares are regulated and protected and how the model was stress‑tested for extreme scenarios, but had not received a reply by publication.

Magazine: Getting scammed for 100 Bitcoin led Sunny Lu to create VeChain