Rapid7 Operation ASTERIX Shows AI Is Now Core Crypto Phishing Tool

Rapid7 discovered a phishing campaign targeting crypto users, using AI tools to create fake wallet apps and impersonate support. The operation involved 885,000 phone numbers, with a high success rate in identifying CryptoCom accounts. AI tools like GitHub Copilot and Claude Code were used to streamline the process. The campaign highlights the dual-use of AI in both legitimate and malicious activities within the crypto sector.

Original reporting
Published Aug 20, 2026, 4:01 AM UTC
Analysis
alphai AI DeskAI-generated
Added to alphai Aug 20, 2026, 4:24 AM UTC. Informational, not investment advice.
How this was made
alphai summarizes source reporting and applies a structured AI analysis for relevance, timing, sentiment and ticker impact. Always verify material claims with the original publisher.
Rapid7 Operation ASTERIX Shows AI Is Now Core Crypto Phishing Tool — source image
Decision brief

The 30-second read

Low
01

Why it matters

The report signals a new vector of crypto theft that could pressure wallet providers and exchanges to enhance security protocols.

02

Market read

New intelligence on AI-facilitated crypto phishing may influence security spending and risk assessments across the crypto ecosystem.

03

What to watch

Potential regulatory responses and insurance costs for exchanges could amplify market effects.

Relevance 5/10Novelty 6/10Timing: current

Background

Operation ASTERIX reveals AI-driven phishing campaigns targeting crypto wallet recovery phrases using counterfeit apps.

Market effects

Highlights rising AI-enabled threats to crypto wallets, may increase security spending in the crypto infrastructure sector.

Primarily affects users and exchanges globally; no immediate regional price impact.

Raises awareness of systemic risk in crypto custody solutions worldwide.

Counterpoint

Some may view the threat as overstated, arguing that most users avoid entering recovery phrases into apps.

Key entities

  • Rapid7

    Security firm that uncovered the Operation ASTERIX campaign.

  • Trezor

    Hardware wallet brand whose name was used in counterfeit apps.

  • Ledger

    Hardware wallet brand whose name was used in counterfeit apps.

  • Exodus

    Software wallet brand whose name was used in counterfeit apps.

Related articles

$RPDHighAI 9/10

Why is Rapid7 stock surging today?

Rapid7 stock surged 13.2% after reporting better-than-expected Q2 2026 results, raising full-year EPS guidance by 15.7% to $1.81. Analysts increased price targets, with Citi at $13 and Susquehanna at $15. The company announced a 12% workforce reduction and expects $130M in free cash flow. The broader market's risk-on sentiment also supported the rise.

$RPDHighAI 8/10

Rapid7 (RPD) Bets On A Sharper Focus To Reverse Its Slide

Rapid7 (RPD) reported Q2 earnings with a 1% YoY ARR growth to $824M, driven by 5% YoY growth in detection and response. Profitability beat guidance with non-GAAP operating income of $28.9M. The company cut 12% of its workforce to improve margins. However, total ARR and revenue declined, with Q3 ARR guided down to $812M. Management raised full-year non-GAAP operating income guidance to $129M-$133M. The stock trades at a forward P/E of 6.88.

$RPDMedAI 9/10

Rapid7 (RPD) Q2 2026 Earnings Call Transcript

Rapid7 (RPD) reported Q2 FY2026 total ARR of $824 million, down 2% year over year, and revenue of $210.9 million, down 1.5%. Core platform ARR grew 1% and Detection and Response ARR grew 5%. Non-GAAP operating income was $28.9 million, free cash flow $31.9 million. FY2026 revenue guidance is $837–$841 million.

$RPDMed

Rapid7, Inc. Q2 2026 Earnings Call Summary

Rapid7, Inc. discussed its Q2 2026 earnings call, saying performance is constrained by limited resource focus and it is shifting from standalone tools to integrated security outcomes linking exposure management with detection and response. Core platform ARR grew about 1% YoY, while total ARR was pressured by non-core declines. It plans a 12% workforce reduction, $10 million to $11 million restructuring charges, and expects to exit 2026 with 20% non-GAAP operating margin. Rapid7 also expects to r

$RPDMedAI 8/10

Rapid7 layoffs: Boston cybersecurity firm cuts 300 jobs

Rapid7 said it cut about 300 jobs, or 12% of its workforce, in Q2, announced with its second-quarter earnings. The company reported 2025 revenue of $860 million and forecast 2026 sales of $837 million at the low end. Rapid7 said the layoffs will cost $11 million to $12 million, mainly for severance. Shares rose 6% in aftermarket trading.