{"id":9537,"date":"2025-06-20T19:06:02","date_gmt":"2025-06-20T19:06:02","guid":{"rendered":"https:\/\/cryptonewsdesk.com\/?p=9537"},"modified":"2025-06-20T19:06:09","modified_gmt":"2025-06-20T19:06:09","slug":"north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update","status":"publish","type":"post","link":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/","title":{"rendered":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update"},"content":{"rendered":"\n

A sophisticated phishing scam allegedly orchestrated by the Lazarus Group<\/strong>, North Korea\u2019s notorious state-sponsored hacking collective, has resulted in the theft of crypto assets from Mehdi Farooq<\/strong>, a prominent investment partner at Hypersphere and former executive at Animoca Brands.<\/p>\n\n\n\n

In a detailed post shared on X (formerly Twitter)<\/strong> on Thursday, Farooq recounted how a fake Zoom update<\/strong> led to the compromise of six crypto wallets<\/strong>, costing him a significant portion of his life savings.<\/p>\n\n\n\n

The Attack: A Familiar Face, a Fake Meeting, and a Fatal Click<\/strong><\/h3>\n\n\n\n

The phishing campaign began with what seemed like a routine message from Alex Lin<\/strong>, a known professional contact. After Farooq shared his Calendly link, Lin followed up to request switching the meeting to Zoom Business<\/strong>, citing \u201ccompliance reasons\u201d and the involvement of a mutual acquaintance named Kent.<\/p>\n\n\n\n

The Zoom call itself appeared legitimate both attendees had their cameras on. However, there was no audio. The participants claimed to be experiencing technical issues and encouraged Farooq to download a Zoom client update<\/strong> sent via the chat interface.<\/p>\n\n\n\n

Moments after Farooq installed the update, his wallets were drained<\/strong>. He later discovered that Lin\u2019s Telegram account had been compromised, and the meeting was a carefully orchestrated social engineering attack<\/strong> linked to Lazarus.<\/p>\n\n\n\n

\n

\u201cIt was surreal and completely violating\u2026 I was compromised by DPRK-affiliated threat known as \u2018dangrouspassword,\u2019\u201d Farooq wrote on X.<\/p>\n<\/blockquote>\n\n\n\n

A Pattern Emerges: Lazarus Group\u2019s Zoom Trap<\/strong><\/h3>\n\n\n\n

This attack mirrors an ongoing pattern of phishing campaigns using fake Zoom updates<\/strong>, a method increasingly associated with Lazarus operations. The scheme involves:<\/p>\n\n\n\n

    \n
  • Impersonating trusted contacts<\/strong> using hijacked messaging accounts (Telegram, WhatsApp)<\/li>\n\n\n\n
  • Scheduling fake Zoom meetings<\/strong> with familiar names and faces<\/li>\n\n\n\n
  • Faking technical issues<\/strong> (no audio\/video glitches) to build urgency and realism<\/li>\n\n\n\n
  • Distributing malware disguised as Zoom updates<\/strong>, which silently compromises systems and extracts wallet data or credentials<\/li>\n<\/ul>\n\n\n\n

    Just weeks earlier, Kenny Li<\/strong>, co-founder of Manta Network<\/strong>, narrowly avoided a similar scam. The attackers impersonated known contacts and insisted on a Zoom update. Li\u2019s suspicion led him to switch platforms, prompting the scammers to block him and delete all traces of the conversation.<\/p>\n\n\n\n

    Industry-Wide Threat: Founders and Developers Targeted<\/strong><\/h3>\n\n\n\n

    This isn’t an isolated incident. Other crypto leaders including teams from Mon Protocol<\/strong>, Stably<\/strong>, and Devdock AI<\/strong> have reported receiving similar phishing attempts. In all cases, the attack flow was consistent: friendly introduction, urgent scheduling, fake Zoom, malware.<\/p>\n\n\n\n

    Nick Bax<\/strong> of the Security Alliance previously dissected this campaign in a viral March 11 post<\/strong>, warning that the Lazarus Group was deploying deepfake video feeds<\/strong> and advanced spear-phishing methods to drain crypto wallets across the industry.<\/p>\n\n\n\n

    Community Response: Whitehats Step In<\/strong><\/h3>\n\n\n\n

    Despite the loss, Farooq highlighted the support from whitehat hackers and the broader crypto security community<\/strong>, many of whom reached out with help, forensics advice, and emotional support.<\/p>\n\n\n\n

    \n

    \u201cIn the darkest moment, whitehat hackers stepped up complete strangers offering help when I was at my lowest,\u201d he shared.<\/p>\n<\/blockquote>\n\n\n\n

    Staying Safe: What You Can Do<\/strong><\/h3>\n\n\n\n

    In light of the growing sophistication of phishing attacks, security experts recommend the following precautions:<\/p>\n\n\n\n

      \n
    • Never install software from chat links<\/strong>, especially during video calls<\/li>\n\n\n\n
    • Verify all meeting invites and download links independently<\/strong>, via official sites<\/li>\n\n\n\n
    • Enable multi-factor authentication (MFA)<\/strong> on wallets and email accounts<\/li>\n\n\n\n
    • Use hardware wallets<\/strong> and avoid storing private keys or seed phrases on internet-connected devices<\/li>\n\n\n\n
    • Regularly update anti-malware tools<\/strong> and audit device access logs<\/li>\n<\/ul>\n\n\n\n

      Outlook<\/strong><\/h3>\n\n\n\n

      As Web3 adoption accelerates, so does the attention from state-sponsored actors like Lazarus. The crypto community now faces a dual challenge: building innovative technology while defending against nation-state-level attacks<\/strong>.<\/p>\n\n\n\n

      The Lazarus Group\u2019s Zoom update scam is just the latest reminder that trust, even among known peers, must be constantly verified<\/strong> in today\u2019s digital landscape.<\/p>\n","protected":false},"excerpt":{"rendered":"

      A sophisticated phishing scam allegedly orchestrated by the Lazarus Group, North Korea\u2019s notorious state-sponsored hacking collective, has resulted in the theft of crypto assets from Mehdi Farooq, a prominent investment partner at Hypersphere and former executive at Animoca Brands. In a detailed post shared on X (formerly Twitter) on Thursday, Farooq recounted how a fake…<\/p>\n","protected":false},"author":3,"featured_media":9538,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[63,70],"tags":[1258,580,1259],"class_list":["post-9537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-news","category-finance","tag-ex-animoca","tag-lazarus-group","tag-zoom-update"],"yoast_head":"\nNorth Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News<\/title>\n<meta name=\"description\" content=\"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News\" \/>\n<meta property=\"og:description\" content=\"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-20T19:06:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-20T19:06:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15-1024x576.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Digital Vibe\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Digital Vibe\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/\"},\"author\":{\"name\":\"Digital Vibe\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#\\\/schema\\\/person\\\/56afc0b5a42e13762ccad410f131f96a\"},\"headline\":\"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update\",\"datePublished\":\"2025-06-20T19:06:02+00:00\",\"dateModified\":\"2025-06-20T19:06:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/\"},\"wordCount\":627,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/81-15.png\",\"keywords\":[\"ex-Animoca\",\"Lazarus group\",\"zoom update\"],\"articleSection\":[\"Crypto News\",\"Finance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/\",\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/\",\"name\":\"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/81-15.png\",\"datePublished\":\"2025-06-20T19:06:02+00:00\",\"dateModified\":\"2025-06-20T19:06:09+00:00\",\"description\":\"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/81-15.png\",\"contentUrl\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/81-15.png\",\"width\":1920,\"height\":1080,\"caption\":\"Zoom Update\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/2025\\\/06\\\/20\\\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptonewsdesk.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#website\",\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/\",\"name\":\"Crypto News\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptonewsdesk.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#organization\",\"name\":\"Crypto News\",\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Crypto-NEWS.png\",\"contentUrl\":\"https:\\\/\\\/cryptonewsdesk.com\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Crypto-NEWS.png\",\"width\":500,\"height\":500,\"caption\":\"Crypto News\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/crypto-news-desk\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptonewsdesk.com\\\/#\\\/schema\\\/person\\\/56afc0b5a42e13762ccad410f131f96a\",\"name\":\"Digital Vibe\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g\",\"caption\":\"Digital Vibe\"},\"url\":\"https:\\\/\\\/cryptonewsdesk.com\\\/index.php\\\/author\\\/digital-vibe\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News","description":"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/","og_locale":"en_US","og_type":"article","og_title":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News","og_description":"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.","og_url":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/","og_site_name":"Crypto News","article_published_time":"2025-06-20T19:06:02+00:00","article_modified_time":"2025-06-20T19:06:09+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15-1024x576.png","type":"image\/png"}],"author":"Digital Vibe","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Digital Vibe","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#article","isPartOf":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/"},"author":{"name":"Digital Vibe","@id":"https:\/\/cryptonewsdesk.com\/#\/schema\/person\/56afc0b5a42e13762ccad410f131f96a"},"headline":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update","datePublished":"2025-06-20T19:06:02+00:00","dateModified":"2025-06-20T19:06:09+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/"},"wordCount":627,"commentCount":0,"publisher":{"@id":"https:\/\/cryptonewsdesk.com\/#organization"},"image":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15.png","keywords":["ex-Animoca","Lazarus group","zoom update"],"articleSection":["Crypto News","Finance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/","url":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/","name":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update - Crypto News","isPartOf":{"@id":"https:\/\/cryptonewsdesk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#primaryimage"},"image":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15.png","datePublished":"2025-06-20T19:06:02+00:00","dateModified":"2025-06-20T19:06:09+00:00","description":"North Korea's Lazarus Group drained crypto wallets of ex-Animoca exec Mehdi Farooq through a fake Zoom update phishing scam. The attack highlights growing threats in Web3 from state-sponsored hackers and the urgent need for stronger security practices.","breadcrumb":{"@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#primaryimage","url":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15.png","contentUrl":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/06\/81-15.png","width":1920,"height":1080,"caption":"Zoom Update"},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonewsdesk.com\/index.php\/2025\/06\/20\/north-korean-linked-lazarus-group-drains-ex-animoca-execs-wallets-via-fake-zoom-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonewsdesk.com\/"},{"@type":"ListItem","position":2,"name":"North Korean-Linked Lazarus Group Drains Ex-Animoca Exec\u2019s Wallets via Fake Zoom Update"}]},{"@type":"WebSite","@id":"https:\/\/cryptonewsdesk.com\/#website","url":"https:\/\/cryptonewsdesk.com\/","name":"Crypto News","description":"","publisher":{"@id":"https:\/\/cryptonewsdesk.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonewsdesk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cryptonewsdesk.com\/#organization","name":"Crypto News","url":"https:\/\/cryptonewsdesk.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonewsdesk.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/04\/Crypto-NEWS.png","contentUrl":"https:\/\/cryptonewsdesk.com\/wp-content\/uploads\/2025\/04\/Crypto-NEWS.png","width":500,"height":500,"caption":"Crypto News"},"image":{"@id":"https:\/\/cryptonewsdesk.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/crypto-news-desk"]},{"@type":"Person","@id":"https:\/\/cryptonewsdesk.com\/#\/schema\/person\/56afc0b5a42e13762ccad410f131f96a","name":"Digital Vibe","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/37e93c2e55bfd306b5f3247c0ce7dba6687533106a6330857687e3dcd20fc018?s=96&d=mm&r=g","caption":"Digital Vibe"},"url":"https:\/\/cryptonewsdesk.com\/index.php\/author\/digital-vibe\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/posts\/9537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/comments?post=9537"}],"version-history":[{"count":1,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/posts\/9537\/revisions"}],"predecessor-version":[{"id":9539,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/posts\/9537\/revisions\/9539"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/media\/9538"}],"wp:attachment":[{"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/media?parent=9537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/categories?post=9537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonewsdesk.com\/index.php\/wp-json\/wp\/v2\/tags?post=9537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}