#криптовалюта
-
OpenAI Model Spent a Stranger's Test ETH to Deploy a Contract
OpenAI has disclosed seven new cases of misaligned model behavior. In one, a research model with no funds derived private keys from public seed phrases and paid with someone else's test coins.
-
Ledger confirms spy-chip implant behind crypto wallet thefts
Some Ledger devices sold through Malaysian reseller CryptoBilis carried a hidden spy chip that captured the seed phrase and drained their owners' crypto.
-
Microsoft’s X Account Hijacked for a Clippy Crypto Pump-and-Dump
Microsoft’s official X account, with over 13 million followers, was commandeered to promote a crypto token in an apparent pump-and-dump scheme.
-
Bitget: $388M Heist Ran Through a Flaw in a Third-Party Security Product
Crypto exchange Bitget says the thief who took $388 million got in through a zero-day in a third-party security product it used, harvested high-level internal credentials, and pushed fraudulent withdrawal commands.
-
Bitget crypto exchange hacked: $351.6 million stolen
Crypto exchange Bitget says attackers drained $351.6 million from its hot and warm wallets. Suspected North Korean hackers are behind the breach.
-
North Korean WaterPlum group infects 30,000 devices worldwide
A joint alert from the intelligence agencies of four countries reports that North Korean hackers have stolen more than $10.7 million in cryptocurrency, targeting job seekers under the guise of fake interviews.
-
Neovim's 10 Bitcoin: An $800,000 Donation Left Untouched Since 2023
A Hacker News user peeked into the Bitcoin wallet listed in the footer of the Neovim site and discovered a forgotten donation of 10 BTC that, at today's exchange rate, is worth $800,000.
-
Trezor warns of phishing after email provider breach
The hardware crypto wallet maker says that attackers who compromised its third-party email provider are sending customers fake “security alerts.”
-
JSCeal: Crypto Malware Hijacks Google Sessions and Spoofs Exchange Traffic
Researchers at Check Point have dissected JSCeal — a compiled JavaScript malware that steals browser cookies, bypasses Google authentication, and tampers with crypto-exchange traffic.
-
18 Chrome extensions and one for Edge stole crypto wallet keys
Socket researchers have exposed the Superior campaign: attackers bought up and built harmless extensions, then used auto-updates to turn them into tools for stealing cryptocurrency.
-
SafePal Data Breach: Nearly 40,000 Customers Affected
SafePal, a maker of hardware crypto wallets, has disclosed a breach affecting 39,798 customers. The stolen order data is already up for sale on a cybercrime forum.
-
ClickFix for macOS: an infostealer quietly skims a slice of your crypto
Researchers at Huntress have uncovered a Go-based piece of malware that steals passwords, Apple Keychain data and hijacks cryptocurrency transactions through fake instructions in Terminal — but drains only a portion of the wallet rather than the whole thing.
-
Phishing Disguised as a COLDCARD Audit Installs a Remote Access Tool
Scammers play on the fears of COLDCARD hardware wallet owners in the wake of an $88.6 million bitcoin theft, convincing victims to install ScreenConnect under the guise of a diagnostic tool.
-
Coldcard Vulnerability: $70M in Bitcoin Stolen in 41 Minutes
A bug in the Coldcard hardware wallet's firmware reduced seed-phrase generation to a predictable software generator. On July 30 an attacker drained 1,196 addresses, moving out 1,082.65 BTC.
-
The Adform Breach: A Swapped Script Rewrote Crypto Wallets on Clients' Sites
Attackers altered a JavaScript file belonging to the Adform advertising platform, turning it into an in-browser tool for swapping crypto wallet addresses. The incident affected sites that used the shared tracking script.
-
North Korean Hackers Target macOS Through Fake Updates and Search Ads
A DPRK-linked group has added a new trick to its Contagious Interview campaign: a full-screen fake macOS update prompts the victim to run a malicious command in the terminal themselves.
-
Apple Sued Over Fake Crypto Wallet in the App Store: $1.8M in Losses
Three users accuse Apple of negligence: they downloaded a fake crypto wallet from the App Store and lost more than $1.8 million between them.
-
Malware Built Right in the Browser: How the SourTrade Campaign Works
Researchers at Confiant have described a large-scale advertising campaign in which malicious JavaScript makes the victim's browser “assemble” the malware from separate components on its own, right in memory.
-
North Korean hackers hide malware in SVG flags of fake coding tests
Attackers tied to the Contagious Interview campaign are using steganography in SVG images to conceal a malicious payload inside fake assignments for job seekers. The victims are developers who respond to bogus job openings.
-
New OkoBot Malware Framework Discovered Stealing Cryptocurrency
Researchers have identified a new malware framework called OkoBot that deploys more than 20 different payloads to steal data and cryptocurrency. The attacks primarily target crypto wallet seed phrases and user credentials.
- More