Co-founder of BTC Prague Warns of Sophisticated Phishing Attack

• A security warning on a high-level hacking campaign has been issued to the crypto community.
• Kuchař cautioned social media users about potential sophisticated phishing attacks.
• A Security researcher Jeremiah Fowler disclosed a leaked dataset of 149 million records including 420k Binance login credentials.

A sophisticated phishing attack targeting crypto users has been flagged. Martin Kuchař, co-founder of BTC Prague, has cautioned crypto users that a high-level hacking campaign is ongoing and it is being propagated through social engineering.

“A high-level hacking campaign is currently targeting Bitcoin and crypto users. I have been personally affected via a compromised Telegram account,” Kuchař stated.

Crypto Users Targeted By Dark Web Hackers 

According to Kuchař, the attackers gain access to crypto users’ personal information by initiating a Zoom call. He stated that attackers use deep fake AI videos to mimic personal friends. 

It is during the video call that the attackers claim to help fix audio issues with a plug-in, which is a malicious bug. Moreover, this plugin provides the attackers with users’ systems, which helps compromise crypto and Telegram accounts.

Kuchař related this ongoing attack vector on the crypto community to a similar one from the North Korea-linked hacking group BlueNoroff. Moreover, cybersecurity researchers at Huntress noted that BlueNoroff used a malicious AppleScript file that used multi-stage malware to steal data from macOS users.

A major data compromise has been reported earlier affecting Binance users. According to a cybersecurity researcher Jeremiah Fowler, a database containing 149 million usernames and passwords has been found exposed online. 

The exposed database contains login details linked to about 48 million Gmail accounts, 17 million Facebook users, and 420k Binance accounts. The stolen user information can easily be sold through the dark net, thus further putting the crypto community at the mercy of a sophisticated ring of hackers.

“These records covered almost any type of account imaginable. Because the data includes emails, usernames, passwords, and the exact login URLs, it could be used to automate large-scale account takeovers,” Fowler stated.

Related: North Korean Konni Hackers Deploy AI-Generated Malware to Target Devs

What’s the Call for Action?

The crypto community has been urged to remain vigilant on unverified social media communications. Furthermore, hackers are targeting crypto users through malicious links and leveraging artificial intelligence in deep fake videos.

As such, Kuchař has urged Telegram users to treat all messages as untrustworthy even though they are from known contacts. Instead, he urged the crypto community to prioritize secure communication channels such as Signal app, and Jitsi. 

For browser-based calls, Kuchař urged the crypto community to use Google Meet due to its battle-tested sandboxing. Ultimately, every crypto user needs to have a secure password Authenticator, which does not store information on the cloud.

Moreover, Chainalysis reported that individual wallet compromises surged to 158k incidents in 2025, whereby hackers stole $3.4 billion.

Related: Blockchain Trackers Identify Crypto Transactions Linked to the January 10 Attack