According to Deep Tide TechFlow news on June 19, as reported by Cointelegraph, Mehdi Farooq, an investment partner at the cryptocurrency venture capital firm Hypersphere, lost a significant amount of savings in a carefully orchestrated phishing attack. The attacker initiated a Telegram message impersonating someone he knew, Alex Lin, to arrange a Zoom meeting. Before the meeting, the attacker requested a switch to Zoom Business for "compliance reasons" and claimed another acquaintance would also join.

During the meeting, Farooq encountered audio issues and was instructed to update the Zoom software, after which his system was compromised. The attacker emptied his six wallets within minutes, resulting in a loss of "years of savings." Farooq later discovered that the real Alex Lin's account had been hijacked, and the attack was related to the North Korean threat organization "dangrouspassword."