A new, complex crypto Zoom scam is targeting numerous crypto holders, users have lost around $300,000 till now.
Cybersecurity engineer and NFT collector “NFT_Dreww” has raised the alarm about a new “extremely sophisticated” crypto scam involving fake Zoom links.
On July 22, Drew took to X (formerly Twitter) to warn users about this latest threat, which has already resulted in the theft of $300,000 worth of cryptocurrency.
How the Complex Crypto Zoom Scam Works
The scam typically targets NFT holders or crypto whales, with scammers approaching victims under the guise of business opportunities.
Drew explained that scammers often ask targets “if they would be interested in licensing their intellectual property, inviting them to Twitter Spaces, or asking them to join a team for a new project.”
The scammers then insist on using Zoom for a meeting, pressuring the target to join quickly using a malicious link that’s difficult to distinguish from a genuine Zoom URL.
Drew noted:
“It’s extremely easy to fall for this… I doubt 80% of people verify each character in a link that’s sent, especially a Zoom link.”
Malware Installation Process
Upon clicking the link, users encounter a page with an infinite loading screen. The page then prompts the installation of “ZoomInstallerFull.exe,” which is malware.
After installation, the page redirects to the official Zoom platform, creating the illusion that everything is working normally. However, by this point, the malware has already infiltrated the target’s computer.
Technical Details of the Malware
Technologist “Cipher0091,” credited in Drew’s thread, explained that the malware adds to the Windows Defender exclusion list upon execution, preventing antivirus systems from blocking it.
Drew added:
“Then it begins executing and extracting all your information while the software is distracting you with the ‘spinning loading page’ and going through the process of accepting T&Cs, etc.”
Evolving Tactics of Scammers
The scammers continually change domain names to avoid detection. Drew mentioned that this was their fifth domain for this particular scam.
He warned that social engineering crypto scams, while not new, are constantly evolving.
In addition to the Zoom scam, several crypto community members have reported receiving malicious emails from scammers impersonating crypto influencers and executives.
These emails contain attachments that likely install crypto-stealing malware if opened.
Protective Measures
Users are encouraged to be cautious when clicking on links, especially those claiming to be from well-known platforms like Zoom, even though this isn’t indicated directly in the material presented.
Avoiding such complex frauds can be as simple as checking the legitimacy of links and being cautious of unsolicited business proposals.
The most recent fraud warns about the continuous dangers of cryptocurrency and the value of being watchful when safeguarding digital assets.
Image: trustedreviews
Disclosure Statement: Miami Crypto does not take any external funding, or support to bring crypto news to the readers. We do not have any conflicts of interest while writing news stories on Miami Crypto.