PSA: Bitcoiners in a targeted phishing attack

We’d been hearing anecdotes of this happening recently and it just happened to us. Luckily we had upped our opsec procedures recently.

It all starts with a video call invite with someone you “know”. You join the video call, you see their face. But they can’t hear you.

They shoot you a link to another malware domain and try to get you to install software to your computer.

Don’t do it! Pwnage if you do.

Our new policy: all video calls happen on our self-hosted Jitsi server. No exceptions.