Crypto Users Targeted by Scam via Popular Notes App
Cybercriminals have devised a sophisticated scheme to drain crypto wallets by exploiting the Obsidian note-taking app. The attack vector leverages compromised community plugins, deployed after victims are lured via LinkedIn and Telegram under the guise of a fake venture capital firm.
Elastic Security Labs uncovered the campaign, which uses a Trojan called PHANTOMPULSE to gain full device control. Targets—primarily crypto and finance professionals—are engaged in credible discussions about liquidity and treasury solutions before the malware is delivered.
The operation demonstrates alarming creativity in social engineering tactics. Unlike typical phishing attempts, this attack leaves no visible traces, with victims unaware of the compromise until funds disappear.
Log in to Reply
Log in to comment your thoughtsComments
Related Articles
|Square
Get the BTCC app to start your crypto journey
Get started today Scan to join our 100M+ users