Tag: crypto
-
âš¡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists
This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive trove of live secrets was discovered, reminding us that…
-
49 Millionen Dollar weg: Insider-Hack trifft Krypto-Bank Infini
First seen on t3n.de Jump to article: t3n.de/news/49-millionen-dollar-hack-1674930/
-
U.S. recovers $31 million stolen in 2021 Uranium Finance hack
U.S. authorities recovered $31 million in cryptocurrency stolen in 2021 cyberattacks on Uranium Finance, a Binance Smart Chain-based DeFi protocol. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/cryptocurrency/us-recovers-31-million-stolen-in-2021-uranium-finance-hack/
-
FBI: North Korean hackers behind record-breaking Bybit crypto heist
First seen on scworld.com Jump to article: www.scworld.com/brief/fbi-north-korean-hackers-behind-record-breaking-bybit-crypto-heist
-
$1.5B Bybit Hack is Linked to North Korea, FBI Says, in Potentially the Largest Crypto Heist Ever
The FBI referred to the attack as “TraderTraitor,” a malicious campaign linked to North Korean state-sponsored hackers the Lazarus Group. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/bybit-cryptocurrency-heist/
-
API Armor: How Bybit’s Real-Time Blacklisting Is Thwarting a $1.5B Crypto Heist
APIs present a security risk”, that much is a given. Attacks on APIs have caused some of the most significant security incidents of the past decades. But the question now is: How can we flip the script and leverage their power to enhance security? Bybit might just have the answer. Bybit”, one of the world’s…
-
Apple Lets Stalkers Find YOU, ‘nRootTag’ Team Breaks AirTag Crypto
Dumb Design + Crud Code = Privacy Panic: It’s been SEVEN MONTHS, but Tim’s crew is yet to fix the bugs. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/nroottag-apple-find-my-richixbw/
-
FBI: Lazarus Group behind $1.5 billion Bybit heist
Researchers say the heist, in which North Korean state-sponsored hackers stole funds from a cold wallet, is the biggest theft in the history of the cryptocurrency industry. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366619872/FBI-Lazarus-Group-behind-15-billion-ByBit-heist
-
North Korean Hackers Deploy RustDoor and Koi Stealer to Target Cryptocurrency Developers on macOS
A recent cybersecurity report from Unit 42 has revealed a new wave of North Korean-linked cyberattacks targeting macOS First seen on securityonline.info Jump to article: securityonline.info/north-korean-hackers-deploy-rustdoor-and-koi-stealer-to-target-cryptocurrency-developers-on-macos/
-
FBI officially fingers North Korea for $1.5B Bybit crypto-burglary
Federal agents, open up … your browsers and see if you recognize any of these wallets First seen on theregister.com Jump to article: www.theregister.com/2025/02/27/fbi_bybit_korea/
-
FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist
FBI has confirmed that North Korean hackers stole $1.5 billion from cryptocurrency exchange Bybit on Friday in the largest crypto heist recorded until now. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-confirms-lazarus-hackers-were-behind-15b-bybit-crypto-heist/
-
GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects
GitVenom malware campaign targets gamers and crypto investors by posing as open-source projects on GitHub. Kaspersky researchers warn of a malware campaign, dubbed GitVenom, targeting GitHub users. The threat actors behind this campaign created hundreds of fake GitHub repositories with malicious code, disguising them as automation tools, crypto bots, and hacking utilities. The attackers used…
-
How an Attacker Drained $50M from a DeFi Protocol Through Role Escalation
y: Dikla Barda, Roaman Zaikin & Oded Vanunu On February 24, Check Point Blockchain Threat Intel System observed a sophisticated attack on a DeFi protocol, Infini. Infini is a digital banking platform in the crypto space that offers its users savings yields and other financial services. The platform aims to make crypto assets more accessible…
-
Bogus Counter-Strike 2 Tournament Streams Leveraged To Pilfer Cryptocurrency
Tags: cryptoFirst seen on scworld.com Jump to article: www.scworld.com/brief/bogus-counter-strike-2-tournament-streams-leveraged-to-pilfer-cryptocurrency
-
GitVenom attacks abuse hundreds of GitHub repos to steal crypto
A malware campaign dubbed GitVenom uses hundreds of GitHub repositories to trick users into downloading info-stealers, remote access trojans (RATs), and clipboard hijackers to steal crypto and credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitvenom-attacks-abuse-hundreds-of-github-repos-to-steal-crypto/
-
North Korea’s Lazarus Pulls Off Biggest Crypto Heist in History
Cyberattackers believed to be affiliated with the state-sponsored threat group pulled off the largest crypto heist reported to date, stealing $1.5 billion from exchange Bybit. It was carried out by interfering with a routine transfer between wallets. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/north-korea-lazarus-crypto-heist
-
Crypto analysts stunned by Lazarus Group’s capabilities in $1.46B Bybit theft
The amount stolen last week surpasses what the group was able to steal in all of 2024. First seen on cyberscoop.com Jump to article: cyberscoop.com/bybit-lazarus-group-north-korea-ethereum/
-
Crypto and Cybersecurity: The Rising Threats and Why Reliable Wallets Matter
Cybersecurity threats in crypto are rising, from the Bybit hack to fake wallets stealing funds. Learn how to… First seen on hackread.com Jump to article: hackread.com/crypto-cybersecurity-rising-threats-reliable-wallets/
-
DeepSeek Lure Using CAPTCHAs To Spread Malware
Tags: ai, attack, botnet, breach, captcha, cloud, control, credentials, crypto, cybercrime, data, detection, exploit, infrastructure, injection, international, login, malicious, malware, network, open-source, powershell, privacy, scam, service, technology, theft, threat, tool, windowsIntroductionThe rapid rise of generative AI tools has created opportunities and challenges for cybercriminals. In an instant, industries are being reshaped while new attack surfaces are being exposed. DeepSeek AI chatbot that launched on January 20, 2025, quickly gained international attention, making it a prime target for abuse. Leveraging a tactic known as brand impersonation,…
-
Malicious npm Package Targets Developers for Supply Chain Attack
The Socket Research Team has uncovered a malicious npm package@ton-wallet/create designed to steal sensitive cryptocurrency wallet keys from developers and users in the TON blockchain ecosystem. TON, originally developed by Telegram, is a growing platform for decentralized applications (dApps), smart contracts, and cryptocurrency transactions. The malicious package impersonated the legitimate @ton/ton package and remained undetected…
-
Die Lehren aus dem ByBit-Hack
Ein spektakulärer Krypto-Diebstahl erschüttert die Branche: Unbekannte Hacker haben sich Zugang zu einer Offline-Wallet der Handelsplattform ByBit verschafft und digitale Vermögenswerte im Wert von 1,5 Milliarden US-Dollar entwendet. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/bybit-hack-krypto
-
ByBit-Hack erschüttert Krypto-Währungswelt
Check Point Software Technologies hat den großen Diebstahl von Krypto-Währungen am vergangenen Wochenende unter die Lupe genommen. In einem der größten Diebstähle digitaler Vermögenswerte in der Geschichte verschafften sich Hacker einen Zugang zu einer Offline-Ethereum-Wallet und stahlen digitale Vermögenswerte im Wert von 1,5 Milliarden US-Dollar, die hauptsächlich aus Ethereum-Token bestanden. Der jüngste Vorfall bei ByBit…
-
200 Malicious GitHub Repositories Distributing Malware to Developers
A sophisticated malware campaign dubbedGitVenomhas infected over 200 GitHub repositories, targeting developers with fake projects masquerading as legitimate tools. The repositories, active for nearly two years, deploy stealers, remote access Trojans (RATs), and clippers to compromise systems and steal sensitive data, including cryptocurrency wallets. According to the Kaspersky Report, Security researchers estimate the threat actors…
-
GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets
Cybersecurity researchers are calling attention to an ongoing campaign that’s targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub.The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky.”The infected projects include an automation instrument for interacting with Instagram accounts, a Telegram bot that enables First seen on…
-
Beware of Fake Job Interview Challenges Targeting Developers to Deliver Malware
Tags: attack, credentials, crypto, cyber, cyberattack, jobs, korea, login, malicious, malware, north-korea, software, threatA new wave of cyberattacks, dubbed >>DeceptiveDevelopment,
-
ByBitHack zeigt: Multisig- und Cold Wallets sind nicht mehr unangreifbar
Der Angriff auf ByBit hat die Annahmen zur Sicherheit von Krypto-Währungen grundlegend erschüttert. Neben technischen Maßnahmen bleibt menschliches Versagen eine der größten Schwachstellen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bybit-hack-zeigt-multisig-und-cold-wallets-sind-nicht-mehr-unangreifbar/a39939/