Reported by 2 outlets
Operation ASTERIX Uses Vishing and Fake Crypto Wallet Apps to Steal Seed Phrases
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
update from cyberpress.org
Operation ASTERIX Processes 885,000 Phone Numbers to Find Crypto Users for Targeted Fraud
cyberpress.org · 56d ago · August 18th, 2026
The campaign, called Operation ASTERIX, combined account checks, phishing emails, voice calls, fake wallet apps, and Telegram-based data theft . The name comes from Asterisk, the open-source phone system found on the exposed server. Attackers used it to support vishing, or voice phishing, by linking automated calls with fake support emails and malicious wallet software. The exposed directory gave researchers an unusually detailed look at the operation. It contained raw phone-number lists, account-checking tools, phishing panels, lead databases, dialer scripts, fake Ledger, Trezor, and Exodus apps, plus code used to send stolen wallet recovery phrases to Telegram bots. Rapid7 said it notified relevant providers and authorities while much of the infrastructure was still active. Apple’s security team was also notified about the activity. ASTERIX Crypto User Targeting The attackers did not simply call random numbers. They first used bulk validation tools to determine whether a phone number was connected to a cryptocurrency account . This let them focus their fraud effort on people more likely to own digital assets. One recovered tool targeted a Crypto.com account-verification endpoint. It submitted phone numbers using 300 concurrent threads, retry logic, and rotating residential proxies. From a German dataset containing 316,002 mobile numbers, the tool reportedly confirmed 43,066 crypto-linked accounts a hit rate of around 13.6%. A single lure reaches the target by both a branded
-
update from gbhackers.com
Operation ASTERIX Uses Vishing and Fake Crypto Wallet Apps to Steal Seed Phrases
gbhackers.com · 56d ago · August 18th, 2026
The campaign’s exposed operational server also revealed an unusually detailed view of how the operator incorporated AI coding tools into active fraud development. Named after the Asterisk telephony platform found on […] The post Operation ASTERIX Uses Vishing and Fake Crypto Wallet Apps to Steal Seed Phrases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .