Ex-Animoca Executive Loses Life Savings in Sophisticated Lazarus-Linked Zoom Hack

Mehdi Farooq, a former Animoca Brands executive and current investment partner at Hypersphere, fell victim to a devastating phishing attack orchestrated by North Korea's Lazarus Group. The breach drained six of his cryptocurrency wallets after he installed malware disguised as a Zoom Business update.

The attack began with a seemingly legitimate approach via Telegram from a compromised colleague's account. After switching to what appeared to be a genuine Zoom call with familiar contacts, Farooq was prompted to update his client. The fake installation package granted hackers immediate access to his digital assets.

Lazarus Group, known for its state-sponsored crypto theft operations, has increasingly targeted Web3 professionals through social engineering. This incident highlights the growing sophistication of phishing campaigns in the cryptocurrency space, where even experienced investors remain vulnerable.

In a twist of fate, whitehat hackers reached out to assist Farooq after his public disclosure of the incident. Their intervention underscores the crypto community's collaborative spirit against malicious actors.