Crypto Executive Issues Stark Warning After ‘ELUSIVE COMET’ Hack Wipes Out 75% of Digital Assets
Jake Gallen of Emblem Vault Loses Over $100,000 in Zoom-Based Cyber Attack
In a sobering reminder of the evolving threats in the crypto space, Emblem Vault CEO Jake Gallen has revealed that he lost more than 75% of his digital assets, valued at over $100,000, following a sophisticated cyberattack facilitated through Zoom.
The attack, orchestrated by a cybercriminal or group operating under the alias “ELUSIVE COMET,” highlights the growing sophistication of social engineering tactics targeting crypto leaders and influencers.
The Zoom Call That Changed Everything
On April 11, Gallen posted on X (formerly Twitter), stating he had suffered a “complete computer compromise” that resulted in the theft of both Bitcoin (BTC) and Ethereum (ETH) from multiple wallets. The damage was done during what appeared to be a routine video call.
“Unfortunately, this led to $100k+ in purchased digital assets being lost,” Gallen wrote.
The Zoom meeting in question involved a supposed interview arranged by a verified X account with 26,000 followers, claiming to be the CEO of a crypto mining platform. During the call, Gallen’s camera was active, while the other participant remained off-screen. Malware named “GOOPDATE” was installed on Gallen’s device, compromising his credentials and accessing his crypto wallets.
SEAL Security Confirms ELUSIVE COMET Behind the Attack
After the breach, Gallen began working with cybersecurity firm The Security Alliance (SEAL), which confirmed the involvement of ELUSIVE COMET, a threat actor known for targeting crypto executives through well-coordinated, remote-access malware attacks.
“This attacker employs sophisticated social engineering tactics,” SEAL reported, “with the goal of inducing victims into installing malware and ultimately stealing their crypto.”
The malware was reportedly installed during the Zoom call with a YouTube personality boasting over 90,000 subscribers—a tactic designed to lull victims into a false sense of security.
Zoom’s Default Remote Access Settings Under Fire
The attack has drawn attention to a little-known Zoom feature that could leave many users exposed. According to Gallen and NFT expert Leonidas, Zoom’s default settings allow meeting participants to request remote access to each other’s devices.
“If you don’t disable this, anyone in a Zoom call can take over your computer by default,” Leonidas warned.
Security researcher Samczsun added that while the victim still needs to grant access, many are being tricked through elaborate social manipulation.
Ledger Wallet Compromised, X Account Hijacked
Despite best practices, Gallen’s Ledger hardware wallet—which he claimed had not been accessed in years and had no digital record of the password—was also compromised. Following the attack, his X account was hacked in an apparent attempt to lure additional victims through direct messages.
SEAL has since linked ELUSIVE COMET to a fraudulent venture capital firm called Aureon Capital, believed to be responsible for millions in stolen funds. Their tactics rely heavily on fabricated backstories and impersonation to appear legitimate.
Protect Yourself: What Crypto Users Should Know
Cybersecurity experts are now urging crypto users and founders to take immediate action:
-
Disable remote access features on Zoom.
-
Avoid screen-sharing or accepting file downloads from unknown sources.
-
Verify identities through multiple channels before engaging in meetings.
-
Contact SEAL’s emergency hotline on Telegram if you’ve interacted with Aureon Capital or suspect you’ve been targeted.
“These aren’t random phishing attempts anymore,” Gallen cautioned. “They are coordinated, calculated attacks by professionals who know exactly what they’re doing.”
Crypto Industry on Alert
This incident has sent shockwaves through the digital asset community, raising serious concerns about the security of virtual meetings and the increasingly sophisticated methods hackers are using to steal crypto.
As the market continues to mature, so too does the threat landscape. For now, the message from industry leaders is clear: Stay vigilant, question everything, and protect your assets.
