According to Odaily Planet Daily, EurekaTrading founder Kuan Sun posted a post on the X platform, recalling how he nearly lost $13 million to a phishing attack. He explained that on September 2, 2025, approximately $13 million in assets in his wallet were nearly stolen by the Lazarus hacker group. The security team scrambled to recover the funds. The incident stemmed from a seemingly normal Zoom meeting invitation, which turned out to be a carefully crafted phishing trap. The hackers leveraged semi-acquaintances, deepfake videos, and a forged Rabby plugin to tailor the attack to the victim's Venus position. Those who mistakenly withdrew their funds due to the fake plugin were at risk of having their assets transferred away with the associated liabilities.
PeckShield, SlowMist, Venus, and multiple security teams responded quickly, suspending the protocol and investigating risks, ultimately preventing the theft of funds. Hardware wallets aren't foolproof; plugins and front-ends remain vulnerable to hijacking. Zoom links, update pop-ups, and even acquaintances can all serve as entry points for attacks.
