Everything web3, crypto, defi, degen
A large-scale hacking exploit targeting JavaScript code with malware that raised alarms earlier this week has managed to steal only $1,043 in cryptocurrency, according to data from Arkham Intelligence.Cybersecurity researchers at Wiz published analysis of a “widespread” supply chain attack yesterday, writing in a blog post that bad actors used social engineering to gain control…
In brief Shengsheng He was sentenced to 51 months for laundering nearly $37M stolen in a crypto investment scam. The funds were moved through a Bahamas-based shell company, converted to crypto, and sent to scammer wallets. The case is part of a wider DOJ crackdown on global crypto fraud and online money laundering. Shengsheng He,…
In brief GK8 researchers have discovered threat actors recruiting professional voice impersonators on underground forums to target U.S. crypto executives. The personalized “vishing” campaigns make operatives up to $20,000 monthly. Attackers possess curated datasets of executive personal information and use deepfake technology, voice changers, and sophisticated infrastructure to bypass traditional security measures. Cybercriminals are recruiting…
In brief An investor lost 783 Bitcoin—$91 million worth a the time—to a social engineering scam, according to on-chain sleuth ZachXBT. The threat actor allegedly used a coin-mixing service to try to cover their tracks. ZachXBT alleged that three individuals used similar tactics to steal $243 million worth of Bitcoin a year ago. A crypto…
In brief North Wales Police are investigating a $2.8 million (£2.1 million) Bitcoin theft in which a cybercriminal posed as a senior detective. The scammer claimed that the victim’s personal details had been found on the phone of someone recently arrested, before pressuring them to “secure their funds” via a phishing link. The force noted…
In brief CTM360 identified a “ClickTok” campaign using over 10,000 fake domains that mimic TikTok Shop to steal user credentials and distribute malware through phishing pages and trojanized apps. Scammers deploy fake Meta ads and AI-generated TikTok videos mimicking influencers to direct victims to fraudulent storefronts offering heavily discounted products paid for with cryptocurrency. The…
In brief Bengaluru police say hackers used a fake freelance job to trick a CoinDCX employee into installing malware on his office laptop, which was later exploited to steal $44 million (₹379 crore) from the exchange’s liquidity wallet. The employee, now in custody, claimed he was unaware of the breach; police say tracing the funds…
In brief Vincent Mazzotta pleaded guilty to money laundering and obstruction in a $13 million crypto Ponzi scheme The scheme involved the use of fake AI trading bots and a fictitious agency called the “Federal Crypto Reserve. Victims were duped twice, first through bogus crypto investments, then again by being charged fees for fake investigations…
In brief A game released on Steam Early Access contained malicious software that could have compromised victims’ data, according to a report from cybersecurity firm Prodaft. Steam appears to have pulled the game from its pre-release Early Access platform. This isn’t the first time that games launched via the popular Steam platform have contained malware.…
In brief OpenAI rolled out ChatGPT agent to subscribers, enabling web access and task automation. The company warned users about prompt injection attacks that could exploit the agent’s permissions. Experts recommend caution, limited access, and layered security to reduce risks. OpenAI rolled out its ChatGPT agent to Plus, Pro, and Team subscribers on Thursday, offering…
