The account contained know-your-customer photos of Gokal and his wife that had synced to a cloud backup. Users typically supply these images to crypto exchanges or other financial services.
After obtaining the documents, the attackers sought 40 BTC in exchange for keeping the material private, as revealed in the caption of one of the photos posted. Gokal did not pay.
When the extortion attempt failed, the same actor compromised Migos’ 13 million-follower Instagram profile and uploaded images showing Gokal and his wife holding their passports.
“Always remember to dress up smart for your KYC photos. you never know what kind of reach they might get on social media.”
