Collecting Cyber-News from over 60 sources

Tag: theft

French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks

Apr 24, 2026 12:39 PM

Tags: data, government, group, hacker, leak, theft

French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms. First seen on hackread.com Jump to article: hackread.com/french-police-arrest-hexdex-hacker-data-leak-leaks/
Ransomware Gang Unveils Custom Data-Theft Tool

Apr 24, 2026 7:38 AM

Tags: attack, cyber, data, group, ransomware, theft, tool

Ransomware operators introduced a custom-built data exfiltration tool, signaling a notable evolution in attack techniques. Unlike most ransomware groups that rely on publicly available utilities such as Rclone or MegaSync, Trigona affiliates are now using a proprietary tool to steal sensitive data with greater precision and stealth. Trigona, active since late 2022, operates as a…
Bitwarden CLI password manager trojanized in supply chain attack

Apr 24, 2026 1:38 AM

Tags: access, ai, api, attack, automation, cloud, control, credentials, data, github, group, malicious, network, password, software, supply-chain, theft, unauthorized

bw_setup.js that checks if the bun package manager is installed and then uses it to execute bw1.js. If bun doesn’t exist, it is downloaded and installed from GitHub.According to an analysis by security firm JFrog, the malicious payload is designed to detect and collect a board range of credentials and access tokens from the filesystem,…
Cryptohack Roundup: US-Sanctioned Grinex Hacked

Apr 23, 2026 9:39 PM

Tags: crypto, exploit, finance, hacker, scam, theft, update

Also: Updates in KelpDAO, Drift, Hyperbridge Hacks. This week, Grinex was exploited, a hacker laundered KelpDAO funds, Circle was sued over $280M Drift hack, Rhea Finance and Volo Protocol were exploited, update in Hyperbridge hack, sentencing in art scam case, a French home invasion for crypto theft and eth.limo hijack thwarted. First seen on govinfosecurity.com…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Offer customers passkeys by default, UK’s NCSC tells enterprises

Apr 23, 2026 4:39 PM

Tags: attack, authentication, credentials, cyber, identity, login, mfa, passkey, password, phishing, risk, service, strategy, theft

How passkeys change the attack model: The NCSC added that passkeys reduce risk by removing reliance on shared secrets and binding authentication to the legitimate service.According to the agency, this prevents credential reuse and relay attacks, as authentication cannot be intercepted and reused by an attacker.Passkeys use cryptographic key pairs stored on a user’s device,…
UK’s NCSC calls passkeys the default, says passwords are no longer fit for the purpose

Apr 23, 2026 3:39 PM

Tags: attack, authentication, credentials, cyber, identity, login, mfa, passkey, password, phishing, risk, service, strategy, theft

How passkeys change the attack model: The NCSC added that passkeys reduce risk by removing reliance on shared secrets and binding authentication to the legitimate service.According to the agency, this prevents credential reuse and relay attacks, as authentication cannot be intercepted and reused by an attacker.Passkeys use cryptographic key pairs stored on a user’s device,…
Xinference PyPI Breach Exposes Developers to Cloud Credential Theft

Apr 23, 2026 10:39 AM

Tags: attack, breach, cloud, credentials, cyber, data, malicious, pypi, software, supply-chain, theft, threat, tool

A severe supply chain attack has compromised the popular Python package Xinference, exposing developers to massive data theft. Threat actors uploaded malicious versions of the tool to the Python Package Index (PyPI), embedding a heavily obfuscated infostealer into the code. Xinference has over 600,000 total downloads, making this a significant security event for the software…
Malicious pgserve, automagik developer tools found in npm registry

Apr 23, 2026 5:39 AM

Tags: access, attack, breach, cloud, control, corporate, credentials, crypto, data, firewall, github, infrastructure, least-privilege, malicious, malware, network, open-source, password, radius, risk, service, software, tactics, theft, threat, tool, worm

Advice to victimized developers: Developers who have downloaded the malicious versions of pgserver and automagik need to act fast, says Tanya Janca, head of Canadian secure coding consultancy SheHacksPurple.”Rotate every credential you can think of, right now, before you do anything else,” she said. “Then harden your CI/CD network egress controls so your build runners…
North Korea Blamed for $290m KelpDAO Crypto Heist

Apr 22, 2026 5:39 PM

Tags: crypto, group, korea, lazarus, north-korea, theft

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/
Auraboros RAT Adds Live Audio, Keylogging, and Cookie Theft via Open C2 Panel

Apr 22, 2026 11:39 AM

Tags: access, control, credentials, cyber, data, data-breach, framework, Internet, rat, theft

A fully exposed command-and-control (C2) panel for a previously undocumented remote access trojan (RAT) framework dubbed Auraboros, supporting live audio streaming, intensive keylogging, browser credential theft, and multi-cookie hijacking all accessible over the internet with zero authentication. Further inspection revealed “Auraboros C2 Station,” a polished single-page dashboard that immediately loads victim data and live controls without…
North Korea’s Lazarus APT stole $290M from Kelp DAO

Apr 21, 2026 9:39 PM

Tags: apt, crypto, finance, group, hacker, korea, lazarus, north-korea, theft

North Korea-linked Lazarus Group stole $290M from Kelp DAO by abusing LayerZero. A second $95M attempt was stopped. Hackers tied to the North-Korea linked group Lazarus APT carried out a $290M crypto theft targeting Kelp DAO. Kelp DAO is a decentralized finance (DeFi) protocol built on the Ethereum ecosystem that focuses on a concept called…
Top techniques attackers use to infiltrate your systems today

Apr 21, 2026 11:39 AM

Tags: 2fa, access, ai, api, attack, authentication, automation, business, captcha, cloud, container, control, corporate, credentials, cybercrime, cybersecurity, data, deep-fake, defense, detection, email, exploit, flaw, hacking, Hardware, identity, infrastructure, least-privilege, malicious, mfa, microsoft, monitoring, network, password, phishing, powershell, ransomware, risk, saas, scam, service, social-engineering, software, supply-chain, theft, tool, training, vpn, vulnerability, worm

Network security device hacking: Network edge devices have increasingly drawn attackers’ attention over the past two years, establishing a new battleground where the very devices meant to protect the network have become attractive targets for exploitation.As a result, flaws in security device, such as SSL VPN systems and other gateways, are among the top initial…
North Korean Blamed for $290m KelpDAO Crypto Heist

Apr 21, 2026 11:39 AM

Tags: crypto, group, korea, lazarus, north-korea, theft

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/
North Korean hackers blamed for $290M crypto theft

Apr 20, 2026 11:38 PM

Tags: crypto, hacker, north-korea, theft

The hack against Kelp DAO is the largest crypto heist of the year so far. First seen on techcrunch.com Jump to article: techcrunch.com/2026/04/20/north-korea-hackers-blamed-for-290m-crypto-theft/
Scattered Spider member Tyler Buchanan pleads guilty to major crypto theft

Apr 20, 2026 9:39 PM

Tags: crypto, fraud, group, hacking, theft

Tyler Buchanan, linked to Scattered Spider, pleaded guilty in the US to hacking companies and stealing millions in cryptocurrency. Tyler Buchanan, a 24-year-old from Scotland linked to the Scattered Spider group, admitted in a US court that he hacked dozens of companies, committed fraud, and stole millions in cryptocurrency. Spanish police arrested the British national…
Scattered Spider member Tyler Buchanan pleads guilty to major crypto theft

Apr 20, 2026 9:39 PM

Tags: crypto, fraud, group, hacking, theft

Tyler Buchanan, linked to Scattered Spider, pleaded guilty in the US to hacking companies and stealing millions in cryptocurrency. Tyler Buchanan, a 24-year-old from Scotland linked to the Scattered Spider group, admitted in a US court that he hacked dozens of companies, committed fraud, and stole millions in cryptocurrency. Spanish police arrested the British national…
Seiko USA website defaced as hacker claims customer data theft

Apr 20, 2026 9:39 PM

Tags: data, hacker, leak, ransom, theft, usa

The Seiko USA website was defaced over the weekend, displaying a message from attackers claiming they stole its Shopify customer database and threatening to leak it unless a ransom is paid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/seiko-usa-website-defaced-as-hacker-claims-customer-data-theft/
North Korea hackers blamed for $290M crypto theft

Apr 20, 2026 8:39 PM

Tags: crypto, hacker, korea, north-korea, theft

The hack against Kelp DAO is the largest crypto heist of the year so far. First seen on techcrunch.com Jump to article: techcrunch.com/2026/04/20/north-korea-hackers-blamed-for-290m-crypto-theft/
Vercel Traces Customer Data Theft to Agentic AI Tool Breach

Apr 20, 2026 8:39 PM

Tags: ai, breach, cloud, credentials, data, intelligence, service, theft, tool

Attacker First Compromised AI Tool Used by Vercel Employee, Platform Provider Finds. Cloud platform provider Vercel said an attacker breached its systems and stole customer data after compromising a third-party agentic artificial intelligence tool used by an employee, called Context.ai, and stealing from it credentials and OAuth tokens tied to multiple services and customers. First…
Crypto infrastructure company blames $290 million theft on North Korean hackers

Apr 20, 2026 7:33 PM

Tags: crypto, hacker, infrastructure, korea, north-korea, theft

A theft of nearly $300 million worth of cryptocurrency has been attributed to hackers from North Korea, as the industry grapples with the fallout of a wide-ranging incident involving multiple prominent platforms. First seen on therecord.media Jump to article: therecord.media/crypto-north-korea-theft-kelp
British Scattered Spider hacker pleads guilty to crypto theft charges

Apr 20, 2026 4:37 PM

Tags: crypto, cybercrime, fraud, hacker, identity, theft

A British man, believed to be the leader of the Scattered Spider cybercrime collective, has pleaded guilty in the United States to charges of wire fraud and aggravated identity theft. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/british-scattered-spider-hacker-pleads-guilty-to-crypto-theft-charges/
North Korea-Linked UNC1069 Hacks Crypto Pros via Fake Meetings

Apr 20, 2026 2:38 PM

Tags: access, crypto, cyber, google, korea, linux, macOS, malware, microsoft, north-korea, social-engineering, theft, threat, windows

North Korea-linked threat actor UNC1069 is running a highly targeted campaign that abuses fake Zoom, Google Meet, and Microsoft Teams meetings to compromise cryptocurrency and Web3 professionals across Windows, macOS, and Linux systems. The goal is long-term access and large-scale theft of digital assets through stealthy social engineering and multi-stage malware deployment. Attackers often hijack…
Crypto Exchange Grinex Blames Western Spies for $13m Theft

Apr 20, 2026 11:39 AM

Tags: crypto, intelligence, russia, theft

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/crypto-exchange-grinex-western/
Crypto Exchange Grinex Blames Western Spies for $13m Theft

Apr 20, 2026 11:39 AM

Tags: crypto, intelligence, russia, theft

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/crypto-exchange-grinex-western/
British Hacker Admits Stealing Millions in Virtual Currency From Targeted Companies

Apr 20, 2026 9:39 AM

Tags: cyber, cyberattack, hacker, office, theft

A 24-year-old British national, Tyler Robert Buchanan, has pleaded guilty to orchestrating a massive cyberattack campaign that compromised over a dozen U.S. companies and resulted in the theft of at least $8 million in cryptocurrency. According to a Friday announcement from the U.S. Attorney’s Office for the Central District of California, the Scottish hacker admitted…
QEMU Hijacked as Stealth Backdoor for Credential Theft, Ransomware

Apr 20, 2026 8:39 AM

Tags: backdoor, credentials, cyber, detection, open-source, ransomware, theft, threat

Attackers are increasingly abusing QEMU virtual machines to hide credential theft and ransomware staging inside “invisible” virtual environments, making detection and forensics significantly harder for defenders. QEMU is a legitimate open-source emulator and virtualizer that allows running full operating systems as virtual machines on a host. Threat actors are weaponizing this capability by running their…
Cyber attacks fuel surge in cargo theft across logistics industry

Apr 19, 2026 6:39 PM

Tags: access, attack, crime, cyber, cyberattack, hacker, organized, theft

Hackers infiltrate logistics firms to steal cargo and divert payments, cyberattacks are linked to organized crime and rising losses. Proofpoint researchers observed crooks targeting trucking and logistics companies, running coordinated remote access campaigns to steal cargo and divert payments. These attacks appear to be linked to organized crime. The findings highlight a growing trend of…