# Deepfake Zoom calls of Polygon's co-founder push malware to startup founders from a hijacked Telegram account

- Severity: Medium · Status: Still active (past)
- Chains: Multiple EVM chains · Method: Social engineering and fake support
- Started: May 13, 2025 · Last update: May 14, 2025
- Who/what: Startup founders in Polygon's investment network
- AI involvement: AI-made lures. Nailwal said the calls showed AI-generated videos of him, the Polygon Ventures lead and a supposed team member, used to get targets to install malware.

On 13 May 2025 Polygon co-founder Sandeep Nailwal warned that attackers had taken over the Telegram account of the head of Polygon Ventures and were messaging startup founders in its network. Targets were invited to Zoom calls showing AI-generated video of Nailwal and other team members with no audio, and were urged to install an 'SDK' to fix the sound, which would infect their computers. No losses were reported. Do not install software during a call, even when the people on screen look like contacts you know.

## Am I affected?
If a known crypto contact invited you to a Zoom or Teams call with no sound and asked you to install an 'SDK', plugin or update to fix it, and you did, treat that computer as compromised.

## What to do now
- From a clean device, move funds to new wallets and change passwords, 2FA and Telegram sessions.
- Wipe or reinstall the affected machine before using it again.
- Warn the contact on another channel that their account may be hijacked.

## How to avoid this
- A familiar face on a video call is no longer proof; confirm the meeting on a second channel you already trust.
- Never install anything during a call to fix audio or video.
- Keep a separate device used only for signing wallet transactions.

## Sources
- Polygon's co-founder warns of deepfake video scam using his likeness targeting startups (CryptoSlate, 2025-05-14): https://cryptoslate.com/polygons-co-founder-warns-of-sophisticated-deepfake-scam-using-his-likeness-targeting-startups/

Full record: https://drains.watch/i/polygon-cofounder-deepfake-zoom-calls-may-2025 · JSON: https://drains.watch/i/polygon-cofounder-deepfake-zoom-calls-may-2025.json

Rules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support.