Underground Market Recruits Voice Impersonators for Crypto ’Vishing’ Scams

Cybercriminals are deploying sophisticated voice impersonation tactics to target high-level U.S. crypto executives, offering operatives up to $20,000 monthly. Researchers at GK8, a Galaxy company, uncovered recruitment posts on underground forums seeking professional "callers" for these personalized attacks.

The campaigns leverage curated datasets of executive information, deepfake technology, and voice changers to bypass security measures. These threat actors focus on individuals responsible for custody infrastructure and private keys, escalating risks of large-scale crypto theft.

Unlike traditional phishing, these operations represent organized criminal enterprises moving beyond email to voice and video-based social engineering. The shift demonstrates evolving tactics in digital asset exploitation as security measures advance.