“ClickFix” Attacks and Deepfake Zoom Calls Used in Crypto Malware Campaign
-

A new cyber campaign targeting crypto founders and fintech firms shows how sophisticated social engineering has become. Attackers reportedly used a hacked Telegram account belonging to a crypto founder to lure victims into fake Zoom meetings featuring deepfake video feeds.
During the call, the attacker claimed technical issues and instructed the victim to run troubleshooting commands — a tactic known as a ClickFix attack. Hidden within the command was malware that launched a full infection chain. Security researchers say the group has been active since 2018, but AI tools have significantly amplified the scale and realism of their operations.
With past links to major crypto thefts, including high-profile exchange hacks, North Korea-linked actors remain one of the most persistent threats to the digital asset industry.
#CryptoNews #CyberAttack #Web3Security #Malware #Fintech