Cybercriminals targeted 885,000 phone numbers and crypto accounts using AI-generated phishing tools and fake wallet apps.
Cybersecurity researchers uncovered a cryptocurrency fraud operation leveraging AI to develop phishing tools and malicious wallet applications. The campaign, dubbed Operation ASTERIX, targeted nearly 885,000 phone numbers and identified over 43,000 CryptoCom accounts from a dataset of 316,002 numbers in Germany alone.
Attackers used AI models like GitHub Copilot and Claude Code to process target data, debug malware, and build phishing infrastructure. When Claude refused code obfuscation requests, operators switched to Kimi, attempting to bypass its safety controls. The operation also deployed counterfeit Trezor, Ledger, and Exodus wallet apps to steal recovery phrases.
The fraudsters enriched confirmed targets with personal details to enhance impersonation tactics, including vishing calls and phishing emails. The scale and sophistication of the campaign highlight growing risks in crypto security.