Crypto Wallets Continue to be Drained in Elaborate Social Media Scam
Essential information
- Published
- 16/07/2025 16:10
- Modified
- 16/07/2025 19:45
- Tags
- 2025-07-16 atomic stealer cryptocurrency fake companies impersonation information stealer macos malware realst social engineering windows
- Related entities
- 1 observables, 2 others
Description
An ongoing social engineering campaign is targeting cryptocurrency users through fake startup companies impersonating AI, gaming, and Web3 firms. The scammers create elaborate facades using spoofed social media accounts and project documentation on platforms like Notion and GitHub. They contact victims offering to pay them to test software, which is actually malware designed to steal crypto wallet contents. The campaign uses both Windows and macOS malware, including information stealers like Atomic Stealer. The threat actors go to great lengths to appear legitimate, even creating fake conference photos and merchandise stores. Multiple fake company identities have been identified as part of this campaign.