April 12, 2024 at 01:58PM Former Amazon security engineer Shakeeb Ahmed was sentenced to three years in prison for hacking two cryptocurrency exchanges in July 2022, stealing over $12 million. He was also ordered to forfeit $12.3 million and pay restitution to the breached companies. Ahmed used smart contract engineering skills to execute the hacks … Read more
March 21, 2024 at 04:24PM Praefortis, a new company founded in 2024, aims to ethically recover lost or forgotten crypto wallet passwords, offering a lower fee structure than other alternatives. It was formed by experts Jim Carden and Wesley Brandi, who combine digital forensics and coding expertise in their password recovery method. The company emphasizes … Read more
March 12, 2024 at 08:27AM Threat hunters have discovered a set of seven malicious packages on PyPI, targeting cryptocurrency wallets by stealing BIP39 mnemonic phrases. The campaign codenamed BIPClip has been active since December 2022 and has raised concerns about supply chain attacks on crypto assets. The attackers have been careful in crafting the packages … Read more
March 11, 2024 at 10:58AM The Leather cryptocurrency wallet developers warned of a fake app on the Apple App Store, labeled as a wallet drainer, targeting users to steal their digital assets. The app impersonates the genuine product, prompting users to enter their secret passphrases and subsequently draining their wallets. Despite reports, the app remains … Read more
February 14, 2024 at 11:15AM Hackers used a stolen private key to mint and steal over 1.79 billion PLA tokens from the PlayDapp ecosystem. The unauthorized wallet minted 200 million PLA tokens initially, and when PlayDapp offered a reward for returning the stolen contracts and assets, the hackers minted an additional 1.59 billion PLA tokens. … Read more
February 13, 2024 at 11:38AM Hackers exploited a stolen key to steal over $290 million in PLA tokens from the PlayDapp platform. PlayDapp immediately took action, transferring assets, offering a reward to the hacker, and eventually suspending trading. Elliptic reported the hackers’ movement of funds, and suspicions of the North Korean Lazarus Group’s involvement arose … Read more
January 27, 2024 at 02:48AM A spear-phishing campaign targeting Mexican financial institutions has been attributed to an unknown Latin American-based threat actor. The campaign, active since 2021, uses AllaKore RAT to steal banking credentials and authentication information for financial fraud. Large companies with revenues over $100 million are particularly targeted. Additional details include modifications to … Read more
January 25, 2024 at 11:48AM In 2023, $1.7 billion in cryptocurrency was stolen, down from $3.7 billion in 2022. Decentralized financial systems (DeFi) were targeted, with $1.1 billion stolen, a 64% decrease. North Korean hackers stole slightly over $1 billion, with the number of attacks increasing. Cybersecurity measures are improving, with better collaboration between crypto … Read more
January 23, 2024 at 03:25PM X, formerly Twitter, introduces passkeys for iOS users in the U.S., providing enhanced security against breaches and phishing attacks. Passkeys, utilizing public key cryptography, offer protection linked to the device and eliminate the need for complex passwords. While recommended, they are not mandatory following recent account hijacking incidents. Key Takeaways … Read more
January 22, 2024 at 09:21AM Trezor issued a security alert following a data breach on January 17, revealing that unauthorized access to their support ticketing portal led to potential exposure of user information. However, no evidence has been found of compromised digital assets. Users are urged to be vigilant against phishing attacks and never disclose … Read more