Rapid7 controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2026
Rapid7 discloses Operation Asterix crypto phishing campaign
Issue disclosure
Cybersecurity firm Rapid7 disclosed a cryptocurrency phishing campaign known as Operation Asterix. The campaign targeted roughly 885,000 phone numbers across several countries, including 316,002 German mobile numbers and directories covering Hong Kong, Bulgaria, the UK, the US and Canadian fintech companies. According to Rapid7, the campaign matched 5,576 accounts to Binance users and 43,066 accounts to crypto exchange users. It used fake emails impersonating Crypto.com and fake apps impersonating Ledger, Trezor and Exodus to steal seed phrases.
Stated objective. to steal cryptocurrency investors' assets
Source excerpt
The phishing campaign led to 5,576 accounts matched to users on crypto exchange Binance, which were queued for attack, while the recovered logs also showed fake emails impersonating Crypto.com, according to a Monday report by Rapid7.
Cybersecurity firm Rapid7 unveiled a new cryptocurrency phishing campaign known as Operation Asterix, targeting roughly 885,000 phone numbers from several countries to steal cryptocurrency investors’ assets.
As part of the Asterix phishing campaign detailed by Rapid7 analysts Anna Sirokova and Jan Recinsky, attackers drove victims to fake apps impersonating Ledger, Trezor, and Exodus, seeking to steal their seed phrases.