Rapid7 identifies AI-driven phishing campaign with a 13.6% success rate in matching crypto users to exchange accounts.
A cybersecurity investigation uncovered a phishing campaign targeting 885,000 phone numbers, with attackers matching 43,066 accounts to cryptocurrency users. The campaign achieved a 13.6% hit rate, validated against a dataset of over 316,000 German phone numbers.
The report highlights the use of AI tools and a checker for Kraken exchange accounts, indicating advanced tactics to exploit self-custody vulnerabilities. Recent months have seen similar breaches, including a $1 million loss on Ethereum and a $588,000 theft via a fake Ledger Live app.
Phishing remains a persistent threat in the crypto industry, leveraging human error rather than protocol flaws. The findings underscore the growing sophistication of attacks amid rising adoption of digital assets.