Rapid7's Operation Asterix phishing campaign targeted 885,000 phone numbers, matching 5,576 accounts to Binance users. The attack used fake wallet sites and AI tools.
Alpha Score of 71 reflects strong overall profile with strong momentum, strong value, strong quality, moderate sentiment.
Rapid7 revealed a cryptocurrency phishing campaign that siphoned 885,000 phone numbers across multiple countries, with 5,576 of those accounts matched to users on Binance and queued for attack.
The campaign, which Rapid7 calls Operation Asterix, used fake websites impersonating wallet providers including Ledger and Trezor to steal seed phrases, according to a Monday report. Attackers posed as support staff via email and phone calls, directing victims to the fake sites.
Rapid7 analysts Anna Sirokova and Jan Recinsky said the attackers matched 43,066 accounts to cryptocurrency users with exchange accounts from the German dataset of 316,002 mobile numbers, giving a hit rate of roughly 13.6%. The largest single file contained 316,002 German mobile numbers, with directories also covering Hong Kong, Bulgaria, the UK, the US, and additional Ledger-related lists. The recovered logs showed fake emails impersonating Crypto.com and a checker tool built for Kraken that bulk-validated phone numbers against exchange accounts.
Rapid7 said artificial intelligence tools were used as a significant part of the campaign, likely to automate the scale and personalization of the phishing messages. Phishing and social engineering accounted for the majority of crypto industry losses in the first quarter of 2025, totaling $306 million of the $482 million lost, according to blockchain security company Hacken.
The discovery comes weeks after wallet provider Trezor reported a breach affecting about 14,000 users through its shipping partner ShipMonk. In July, a crypto investor lost nearly $1 million after signing a malicious token approval transaction on Ethereum. A similar incident occurred in 2023 when a fake Ledger Live app on the Microsoft Store stole $588,000 across 38 transactions, a pattern that MSFT stock page subsidiary Microsoft has since addressed.
Binance co-founder Changpeng Zhao has previously called for stronger wallet security after an investor lost $50 million in an address poisoning scam in December 2025.
Prepared with AlphaScala editorial tooling from the source reporting linked above. Indexable analysis may include a cited Alpha Score value. Publishing checks screen each story before release. Educational coverage, not personalized advice.