Crypto Founder’s Laptop Compromised After Fake Microsoft Teams Call Impersonating Cardano Team – CryptoSlate Report

Scammers are using artificial intelligence to impersonate real people in cryptocurrency with enough accuracy to fool developers who have met them in person, leading to compromised laptops and potential data theft, according to verified reports from multiple crypto industry sources.

Big Pey, a Cardano ecosystem developer and contributor recognized by industry leaders like Charles Hoskinson, believes his laptop may have been compromised after joining a deepfake video call impersonating a Cardano Foundation contact. According to details shared by the developer on X, he was contacted by someone posing as “Pierre,” a person he had spoken with before. They arranged a meeting, and when he joined, the call appeared legitimate, with familiar visuals, audio, and multiple participants.

During the call, he was told his Microsoft Teams client was outdated and was instructed to update it using terminal commands. He began following the instructions but shut down his laptop soon after because the battery was low. He believes this may have interrupted the attack before it could be completed. In hindsight, he considers the update request a likely attempt to install malicious software.

“Moral of the story, be careful. Trust nothing, trust no one,” Big Pey warned. “AI is making scamming more sophisticated, and as someone who is quite technical savvy, I just got cooked.”

Within hours of his disclosure, similar stories came in from across the crypto industry. CashAnvil, a Cardano constitutional delegate and agency CEO, described an almost identical approach with the fake Pierre, Teams link, the works, but caught the scam because the impersonator didn’t ask for a LinkedIn connection as the real Pierre would have.

The incident highlights a growing threat where AI-generated deepfakes exploit trust in personal connections to bypass traditional security awareness. Scammers are leveraging advancements in generative AI to create convincing audio and video impersonations that can replicate the appearance and voice of known contacts, making social engineering attacks significantly more effective.

Security experts note that these attacks often follow a pattern: initial contact through a familiar platform like Microsoft Teams or Zoom, presentation of a plausible scenario such as a software update, and delivery of malicious instructions under the guise of legitimacy. The use of terminal commands to execute updates is particularly concerning, as it allows attackers to gain direct system access if the user complies.

The targeting of cryptocurrency developers and founders is especially significant given the high value of digital assets and the frequent targeting of this sector by financially motivated cybercriminals. Compromised developer laptops could potentially expose private keys, internal project details, or provide a foothold for broader supply chain attacks.

Industry responders are emphasizing heightened verification protocols, including out-of-band confirmation of identities through separate communication channels and skepticism toward unsolicited technical requests, even when they appear to come from trusted contacts. The incident underscores the need for ongoing security training that addresses emerging AI-powered threats beyond traditional phishing awareness.