Social Engineering Attack via Fake Harmony Voice Link Detected

Severity: High (Score: 60.6)

Sources: Panewslab, Kucoin

Summary

On April 17, 2026, SlowMist reported a social engineering attack utilizing a forged link to 'harmony-voice.app'. Attackers are impersonating project collaboration requests to trick users into installing a malicious application for real-time translation. This attack aims to steal user accounts and assets. SlowMist has alerted its clients and synchronized relevant IOCs to help mitigate risks. Users are advised not to click on links related to the fake application or respond to unsolicited invitations. The attack is ongoing, and the scope of impact remains uncertain as it targets individuals in the blockchain community. SlowMist's warning emphasizes the importance of vigilance against such phishing attempts. Key Points: • SlowMist warns of a phishing attack using a fake Harmony Voice link. • Victims are deceived into installing malicious software under false pretenses. • Users are advised to avoid clicking on suspicious links and invitations.

Key Entities

• Phishing (attack_type)
• harmony-voice.app (domain)
• T1566.002 - Spearphishing Link (mitre_attack)
• Harmony Voice (platform)