Category: cryptocurrency
-
Alabama Man Pleaded Guilty for Hacking U.S. Securities and Exchange Commission X Account
Alabama Man Pleaded Guilty for Hacking U.S. Securities and Exchange Commission X Account Eric Council Jr., a 25-year-old from Athens, Alabama, pleaded guilty on February 10, 2025, to charges stemming from the January 2024 hacking of the U.S. Securities and Exchange Commission’s (SEC) social media account on X (formerly Twitter). The breach involved a fraudulent…
-
Ransomware payments fell by 35% in 2024, totalling $813,550,000
Ransomware payments fell by 35% in 2024, totalling $813,550,000 Payments to ransomware actors decreased 35% year-over-year in 2024, totaling $813.55 million, down from $1.25 billion recorded in 2023. […] Bill Toulas Go to bleepingcomputer
-
Google Play, Apple App Store apps caught stealing crypto wallets
Google Play, Apple App Store apps caught stealing crypto wallets A new campaign dubbed ‘SparkCat’ has been uncovered, targeting the cryptocurrency wallet recovery phrases of Android and iOS users using optical character recognition (OCR) stealers. […] Bill Toulas Go to bleepingcomputer
-
Canadian charged with stealing $65 million using DeFI crypto exploits
Canadian charged with stealing $65 million using DeFI crypto exploits The U.S. Justice Department has charged a Canadian man with stealing roughly $65 million after exploiting two decentralized finance (DeFI) protocols. […] Sergiu Gatlan Go to bleepingcomputer
-
Canadian National Charged for Stealing $65 Million in Crypto
Canadian National Charged for Stealing $65 Million in Crypto U.S. prosecutors have charged Andean Medjedovic, a 22-year-old Canadian, with five counts of criminal indictment for allegedly orchestrating a sophisticated cryptocurrency theft. Medjedovic is accused of exploiting vulnerabilities in the KyberSwap and Indexed Finance DeFi protocols, resulting in significant financial losses. The alleged schemes carried out…
-
KuCoin to pay nearly $300 million in penalties after guilty plea
KuCoin to pay nearly $300 million in penalties after guilty plea KuCoin’s operator, PEKEN Global Limited, pleaded guilty to operating an unlicensed money-transmitting business and agreed to pay $297 million in penalties to settle charges in the U.S. […] Bill Toulas Go to bleepingcomputer
-
Solana Pump.fun tool DogWifTool compromised to drain wallets
Solana Pump.fun tool DogWifTool compromised to drain wallets DogWifTools has disclosed on its official Discord channel that its software has been compromised by a supply chain attack that impacted its Windows client, infecting users with malware. […] Bill Toulas Go to bleepingcomputer
-
US govt says North Korea stole over $659 million in crypto last year
US govt says North Korea stole over $659 million in crypto last year North Korean state-backed hacking groups have stolen over $659 million worth of cryptocurrency in multiple crypto-heists, according to a joint statement issued by the United States, South Korea, and Japan on Tuesday. […] Sergiu Gatlan Go to bleepingcomputer
-
Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam
Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam Imagine trusting your pastor with your savings, only to find out he’s running a crypto scam. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Pastor who saw crypto project in his “dream” indicted for fraud
Pastor who saw crypto project in his “dream” indicted for fraud A pastor at a Pasco, Washington, church has been indicted on 26 counts of fraud for allegedly operating a cryptocurrency scam that defrauded investors of millions between 2021 and 2023. […] Bill Toulas Go to bleepingcomputer
-
New Web3 attack exploits transaction simulations to steal crypto
New Web3 attack exploits transaction simulations to steal crypto Threat actors are employing a new tactic called “transaction simulation spoofing” to steal crypto, with one attack successfully stealing 143.45 Ethereum, worth approximately $460,000. […] Bill Toulas Go to bleepingcomputer
-
Canadian man loses a cryptocurrency fortune to scammers – here’s how you can stop it happening to you
Canadian man loses a cryptocurrency fortune to scammers – here’s how you can stop it happening to you A Canadian man lost a $100,000 cryptocurrency fortune – all because he did a careless Google search. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Cryptocurrency wallet drainers stole $494 million in 2024
Cryptocurrency wallet drainers stole $494 million in 2024 Scammers stole $494 million worth of cryptocurrency in wallet drainer attacks last year that targeted more than 300,000 wallet addresses. […] Bill Toulas Go to bleepingcomputer
-
New ‘OtterCookie’ malware used to backdoor devs in fake job offers
New ‘OtterCookie’ malware used to backdoor devs in fake job offers North Korean threat actors are using new malware called OtterCookie in the Contagious Interview campaign that is targeting software developers. […] Bill Toulas Go to bleepingcomputer
-
Scams Based on Fake Google Emails
Scams Based on Fake Google Emails Scammers are hacking Google Forms to send email to victims that come from google.com. Brian Krebs reports on the effects. Boing Boing post. Bruce Schneier Go to bruce schneier
-
FBI links North Korean hackers to $308 million crypto heist
FBI links North Korean hackers to $308 million crypto heist The North Korean hacker group ‘TraderTraitor’ stole $308 million worth of cryptocurrency in the attack on the Japanese exchange DMM Bitcoin in May. […] Bill Toulas Go to bleepingcomputer
-
Criminal Complaint against LockBit Ransomware Writer
Criminal Complaint against LockBit Ransomware Writer The Justice Department has published the criminal complaint against Dmitry Khoroshev, for building and maintaining the LockBit ransomware. Bruce Schneier Go to bruce schneier
-
Malicious Rspack, Vant packages published using stolen NPM tokens
Malicious Rspack, Vant packages published using stolen NPM tokens Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. […] Bill Toulas Go to bleepingcomputer
-
New fake Ledger data breach emails try to steal crypto wallets
New fake Ledger data breach emails try to steal crypto wallets A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. […] Lawrence Abrams Go to bleepingcomputer
-
“CP3O” pleads guilty to multi-million dollar cryptomining scheme
“CP3O” pleads guilty to multi-million dollar cryptomining scheme A man faces up to 20 years in prison after pleading guilty to charges related to an illegal cryptomining operation that stole millions of dollars worth of cloud computing resources. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Radiant links $50 million crypto heist to North Korean hackers
Radiant links $50 million crypto heist to North Korean hackers Radiant Capital now says that North Korean threat actors are behind the $50 million cryptocurrency heist that occurred after hackers breached its systems in an October 16 cyberattack. […] Bill Toulas Go to bleepingcomputer
-
Crypto-stealing malware posing as a meeting app targets Web3 pros
Crypto-stealing malware posing as a meeting app targets Web3 pros Cybercriminals are targeting people working in Web3 with fake business meetings using a fraudulent video conferencing platform that infects Windows and Macs with crypto-stealing malware. […] Bill Toulas Go to bleepingcomputer
-
Nebraska Man pleads guilty to $3.5 million cryptojacking scheme
Nebraska Man pleads guilty to $3.5 million cryptojacking scheme A Nebraska man pleaded guilty on Thursday to operating a large-scale cryptojacking operation after being arrested and charged in April. […] Sergiu Gatlan Go to bleepingcomputer
-
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets In itslust for stealing cryptocurrency and sensitive information, North Korean hackers are disguising themselves as remote IT workers, recruiters, and even venture capitalists. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley