Category: cryptocurrency
-
North Korean Hackers Steal $1.5B in Cryptocurrency
North Korean Hackers Steal $1.5B in Cryptocurrency It looks like a very sophisticated attack against the Dubai-based exchange Bybit: Bybit officials disclosed the theft of more than 400,000 ethereum and staked ethereum coins just hours after it occurred. The notification said the digital loot had been stored in a “Multisig Cold Wallet” when, somehow, it…
-
Fake CS2 tournament streams used to steal crypto, Steam accounts
Fake CS2 tournament streams used to steal crypto, Steam accounts Threat actors are exploiting major Counter-Strike 2 (CS2) competitions, like IEM Katowice 2025 and PGL Cluj-Napoca 2025, to defraud gamers and steal their Steam accounts and cryptocurrency. […] Bill Toulas Go to bleepingcomputer
-
Hacker steals record $1.46 billion from Bybit ETH cold wallet
Hacker steals record $1.46 billion from Bybit ETH cold wallet Cryptocurrency exchange Bybit revealed today that an unknown attacker stole over $1.46 billion worth of cryptocurrency from one of its ETH cold wallets. […] Sergiu Gatlan Go to bleepingcomputer
-
Smashing Security podcast #405: A crypto con exchange, and soaring ticket scams
Smashing Security podcast #405: A crypto con exchange, and soaring ticket scams From shadowy Bitcoin exchanges to Interpol’s most wanted, Alexander Vinnik was the alleged kingpin behind BTC-e, a $4bn crypto laundering empire. Learn more about him, and how he became a geopolitical pawn between the US, France, and Russia. Plus! Hear how concert-goers are…
-
Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners
Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners A large-scale malware campaign dubbed “StaryDobry” has been targeting gamers worldwide with trojanized versions of cracked games such as Garry’s Mod, BeamNG.drive, and Dyson Sphere Program. […] Bill Toulas Go to bleepingcomputer
-
zkLend loses $9.5M in crypto heist, asks hacker to return 90%
zkLend loses $9.5M in crypto heist, asks hacker to return 90% Decentralized money lender zkLend suffered a breach where threat actors exploited a smart contract flaw to steal 3,600 Ethereum, worth $9.5 million at the time. […] Lawrence Abrams Go to bleepingcomputer
-
Hacker pleads guilty to SIM swap attack on US SEC X account
Hacker pleads guilty to SIM swap attack on US SEC X account Today, an Alabama man pleaded guilty to hijacking the U.S. Securities and Exchange Commission (SEC) account on X in a January 2024 SIM swapping attack. […] Sergiu Gatlan Go to bleepingcomputer
-
Alabama Man Pleaded Guilty for Hacking U.S. Securities and Exchange Commission X Account
Alabama Man Pleaded Guilty for Hacking U.S. Securities and Exchange Commission X Account Eric Council Jr., a 25-year-old from Athens, Alabama, pleaded guilty on February 10, 2025, to charges stemming from the January 2024 hacking of the U.S. Securities and Exchange Commission’s (SEC) social media account on X (formerly Twitter). The breach involved a fraudulent…
-
Ransomware payments fell by 35% in 2024, totalling $813,550,000
Ransomware payments fell by 35% in 2024, totalling $813,550,000 Payments to ransomware actors decreased 35% year-over-year in 2024, totaling $813.55 million, down from $1.25 billion recorded in 2023. […] Bill Toulas Go to bleepingcomputer
-
Google Play, Apple App Store apps caught stealing crypto wallets
Google Play, Apple App Store apps caught stealing crypto wallets A new campaign dubbed ‘SparkCat’ has been uncovered, targeting the cryptocurrency wallet recovery phrases of Android and iOS users using optical character recognition (OCR) stealers. […] Bill Toulas Go to bleepingcomputer
-
Canadian charged with stealing $65 million using DeFI crypto exploits
Canadian charged with stealing $65 million using DeFI crypto exploits The U.S. Justice Department has charged a Canadian man with stealing roughly $65 million after exploiting two decentralized finance (DeFI) protocols. […] Sergiu Gatlan Go to bleepingcomputer
-
Canadian National Charged for Stealing $65 Million in Crypto
Canadian National Charged for Stealing $65 Million in Crypto U.S. prosecutors have charged Andean Medjedovic, a 22-year-old Canadian, with five counts of criminal indictment for allegedly orchestrating a sophisticated cryptocurrency theft. Medjedovic is accused of exploiting vulnerabilities in the KyberSwap and Indexed Finance DeFi protocols, resulting in significant financial losses. The alleged schemes carried out…
-
KuCoin to pay nearly $300 million in penalties after guilty plea
KuCoin to pay nearly $300 million in penalties after guilty plea KuCoin’s operator, PEKEN Global Limited, pleaded guilty to operating an unlicensed money-transmitting business and agreed to pay $297 million in penalties to settle charges in the U.S. […] Bill Toulas Go to bleepingcomputer
-
Solana Pump.fun tool DogWifTool compromised to drain wallets
Solana Pump.fun tool DogWifTool compromised to drain wallets DogWifTools has disclosed on its official Discord channel that its software has been compromised by a supply chain attack that impacted its Windows client, infecting users with malware. […] Bill Toulas Go to bleepingcomputer
-
US govt says North Korea stole over $659 million in crypto last year
US govt says North Korea stole over $659 million in crypto last year North Korean state-backed hacking groups have stolen over $659 million worth of cryptocurrency in multiple crypto-heists, according to a joint statement issued by the United States, South Korea, and Japan on Tuesday. […] Sergiu Gatlan Go to bleepingcomputer
-
Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam
Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam Imagine trusting your pastor with your savings, only to find out he’s running a crypto scam. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Pastor who saw crypto project in his “dream” indicted for fraud
Pastor who saw crypto project in his “dream” indicted for fraud A pastor at a Pasco, Washington, church has been indicted on 26 counts of fraud for allegedly operating a cryptocurrency scam that defrauded investors of millions between 2021 and 2023. […] Bill Toulas Go to bleepingcomputer
-
New Web3 attack exploits transaction simulations to steal crypto
New Web3 attack exploits transaction simulations to steal crypto Threat actors are employing a new tactic called “transaction simulation spoofing” to steal crypto, with one attack successfully stealing 143.45 Ethereum, worth approximately $460,000. […] Bill Toulas Go to bleepingcomputer
-
Canadian man loses a cryptocurrency fortune to scammers – here’s how you can stop it happening to you
Canadian man loses a cryptocurrency fortune to scammers – here’s how you can stop it happening to you A Canadian man lost a $100,000 cryptocurrency fortune – all because he did a careless Google search. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Cryptocurrency wallet drainers stole $494 million in 2024
Cryptocurrency wallet drainers stole $494 million in 2024 Scammers stole $494 million worth of cryptocurrency in wallet drainer attacks last year that targeted more than 300,000 wallet addresses. […] Bill Toulas Go to bleepingcomputer
-
New ‘OtterCookie’ malware used to backdoor devs in fake job offers
New ‘OtterCookie’ malware used to backdoor devs in fake job offers North Korean threat actors are using new malware called OtterCookie in the Contagious Interview campaign that is targeting software developers. […] Bill Toulas Go to bleepingcomputer
-
Scams Based on Fake Google Emails
Scams Based on Fake Google Emails Scammers are hacking Google Forms to send email to victims that come from google.com. Brian Krebs reports on the effects. Boing Boing post. Bruce Schneier Go to bruce schneier
-
FBI links North Korean hackers to $308 million crypto heist
FBI links North Korean hackers to $308 million crypto heist The North Korean hacker group ‘TraderTraitor’ stole $308 million worth of cryptocurrency in the attack on the Japanese exchange DMM Bitcoin in May. […] Bill Toulas Go to bleepingcomputer
-
Criminal Complaint against LockBit Ransomware Writer
Criminal Complaint against LockBit Ransomware Writer The Justice Department has published the criminal complaint against Dmitry Khoroshev, for building and maintaining the LockBit ransomware. Bruce Schneier Go to bruce schneier
-
Malicious Rspack, Vant packages published using stolen NPM tokens
Malicious Rspack, Vant packages published using stolen NPM tokens Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. […] Bill Toulas Go to bleepingcomputer
-
New fake Ledger data breach emails try to steal crypto wallets
New fake Ledger data breach emails try to steal crypto wallets A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. […] Lawrence Abrams Go to bleepingcomputer
-
“CP3O” pleads guilty to multi-million dollar cryptomining scheme
“CP3O” pleads guilty to multi-million dollar cryptomining scheme A man faces up to 20 years in prison after pleading guilty to charges related to an illegal cryptomining operation that stole millions of dollars worth of cloud computing resources. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley
-
Radiant links $50 million crypto heist to North Korean hackers
Radiant links $50 million crypto heist to North Korean hackers Radiant Capital now says that North Korean threat actors are behind the $50 million cryptocurrency heist that occurred after hackers breached its systems in an October 16 cyberattack. […] Bill Toulas Go to bleepingcomputer
-
Crypto-stealing malware posing as a meeting app targets Web3 pros
Crypto-stealing malware posing as a meeting app targets Web3 pros Cybercriminals are targeting people working in Web3 with fake business meetings using a fraudulent video conferencing platform that infects Windows and Macs with crypto-stealing malware. […] Bill Toulas Go to bleepingcomputer
-
Nebraska Man pleads guilty to $3.5 million cryptojacking scheme
Nebraska Man pleads guilty to $3.5 million cryptojacking scheme A Nebraska man pleaded guilty on Thursday to operating a large-scale cryptojacking operation after being arrested and charged in April. […] Sergiu Gatlan Go to bleepingcomputer
-
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets In itslust for stealing cryptocurrency and sensitive information, North Korean hackers are disguising themselves as remote IT workers, recruiters, and even venture capitalists. Read more in my article on the Hot for Security blog. Graham Cluley Go to grahamcluley