Meeten Malware Campaign Reportedly Undermines Web3 Security Using AI-Legitimized Branding

Threat actors, using aliases such as "Meeten," "Meetio," and "Clusee," reportedly deployed AI-generated content to create fake company websites, blogs, and social media profiles, impersonating legitimate businesses in order to trick Web3 professionals and cryptocurrency users into downloading Realst malware. The malware allegedly targets macOS and Windows platforms, steals credentials, browser data, and cryptocurrency wallet information, exfiltrating sensitive data to remote servers.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The threat actors used AI-generated content to create fake corporate personas and websites to execute a targeted financial scam against Web3 professionals.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The scam successfully distributed malware that exfiltrated highly sensitive personal credentials, keychain data, and browser cookies.
• 3.1 False or misleading information: AI-generated blog posts and product descriptions were used to fabricate a false representation of a legitimate business entity.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was driven by human threat actors who intentionally used deployed AI models to generate realistic content for their fraudulent campaign.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of AI-generated content to populate fake websites and blogs, which falls under transparency obligations for AI-generated content.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Writing Assistant; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Meetone, Meetio, Meeten, Cuesee, Clusee
• Alleged deployer: Meetone, Meetio, Meeten, Cuesee, Clusee
• Alleged harmed parties: Web3 professionals, Cryptocurrency users

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes financial losses from stolen cryptocurrency and banking card details, though the exact amounts are not quantified.

Directly caused: Victims had their cryptocurrency and banking credentials stolen after downloading the malicious software, but no average loss per occurrence is specified.

Inferred additional harm: Given that the campaign targeted Web3 professionals and cryptocurrency wallets over a four-month period, the total financial losses are likely substantial, potentially in the hundreds of thousands of dollars.

Privacy

Reported: The report explicitly describes privacy violations through the unauthorized exfiltration of sensitive personal data.

Directly caused: The distributed malware directly stole and exfiltrated browser cookies, saved passwords, keychain credentials, and Telegram credentials from affected users' systems.

Inferred additional harm: Stolen credentials and session cookies could be used for subsequent unauthorized access, identity theft, or further targeted attacks against the victims' networks.

People affected

• Occurrences reported: 1
• People reportedly harmed: 5
• People reportedly exposed: 10

Potential causes

Management

• Inadequate Security Training: Organizations failed to train Web3 workers on targeted AI social engineering.

Technology

• AI-Generated Scam Websites: AI created realistic website content that added legitimacy to the scam.
• AI-Generated Social Media: AI generated social media profiles to deceive targets on Twitter and Medium.
• Sophisticated Info Stealer: Realst malware bypassed security tools to steal crypto and credentials.

Data Inputs

• Impersonated Telegram Profiles: Scammers used impersonated profiles to establish trust with targets.
• Stolen Investment Presentations: Real corporate presentations were used to make the pitch feel personal.

Human Factors

• Overreliance on Apparent Identity: Victims trusted messages from accounts impersonating known contacts.
• Downloading Untrusted Software: Victims downloaded a fake meeting application without verifying the source.
• Lack of Vigilance on Links: Users clicked links and entered passwords without verifying legitimacy.

Process and Methods

• Lack of Identity Verification: No process was used to verify the identity of contacts on Telegram.
• Absence of Antivirus Protection: Targets lacked antivirus software to alert them to malicious links.
• Missing Multi-Factor Auth: Absence of 2FA allowed compromised credentials to be easily exploited.

Regulatory Environment

• Lack of AI Detection Tools: No regulatory or platform tools to identify AI-generated fake content.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear and detailed technical analysis of the malware and the social engineering tactics used. The role of AI is explicitly identified as generating text for fake websites and blogs to increase legitimacy.
• Ambiguities identified: The specific AI model used to generate the text is not identified, and the exact number of victims or total financial loss is not quantified.
• Alternative interpretations: None.

Threat actors utilized AI-generated content to construct highly realistic fake corporate personas and websites, distributing the 'Realst' info-stealer malware to target Web3 professionals. While the incident represents an evolved capability in cyber-enabled financial fraud, its direct national security implications remain minor and manageable within standard cybersecurity procedures.

• Overall national security impact: Minor
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: Unknown
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The campaign was active for months and has been analyzed, representing an ongoing strategic cybercrime capability rather than an active 72-hour crisis.
• Autonomy: Human-controlled. AI was utilized as a tool by human threat actors to generate static text content, with no autonomous decision-making or execution.
• Novelty: Evolved capability. Represents an evolution of traditional social engineering and phishing techniques by leveraging AI to quickly generate highly credible fake corporate assets.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or human safety risks were targeted or affected in this cyber campaign.
• Information security: Minor. AI-generated content was used to create fake corporate personas for phishing, representing a minor information manipulation threat but not targeting classified state intelligence.
• Sovereignty: Negligible. No state authority, electoral systems, or core government operations were targeted or disrupted by this incident.
• Economic security: Minor. Targeted theft of cryptocurrency and banking credentials poses minor economic risks, limited to individual Web3 professionals rather than systemic financial infrastructure.
• Societal stability: Negligible. No mass surveillance, systemic discrimination, or population-scale social manipulation occurred.