Security News

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack
2024-12-20 08:39

The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish...

Malicious Microsoft VSCode extensions target devs, crypto community
2024-12-18 17:47

Malicious Visual Studio Code extensions were discovered on the VSCode marketplace that download heavily obfuscated PowerShell payloads to target developers and cryptocurrency projects in supply...

New fake Ledger data breach emails try to steal crypto wallets
2024-12-17 22:04

A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. [...]

Radiant links $50 million crypto heist to North Korean hackers
2024-12-09 20:25

Radiant Capital now says that North Korean threat actors are behind the $50 million cryptocurrency heist that occurred after hackers breached its systems in an October 16 cyberattack. [...]

Windows, macOS users targeted with crypto-and-info-stealing malware
2024-12-06 11:48

Downloading anything from the internet is a gamble these days: you might think that you are downloading an innocuous app from a legitimate firm but thanks to clever misuse of AI and some social...

Crypto-stealing malware posing as a meeting app targets Web3 pros
2024-12-06 11:00

Cybercriminals are targeting people working in Web3 with fake business meetings using a fraudulent video conferencing platform that infects Windows and Macs with crypto-stealing malware. [...]

NCA Busts Russian Crypto Networks Laundering Funds and Evading Sanctions
2024-12-05 05:47

The U.K. National Crime Agency (NCA) on Wednesday announced that it led an international investigation to disrupt Russian money laundering networks that were found to facilitate serious and...

New DroidBot Android malware targets 77 banking, crypto apps
2024-12-04 18:26

A new Android banking malware named 'DroidBot' attempts to steal credentials for over 77 cryptocurrency exchanges and banking apps in the UK, Italy, France, Spain, and Portugal. [...]

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner
2024-11-28 10:48

Cybersecurity researchers have discovered a software supply chain attack that has remained active for over a year on the npm package registry by starting off as an innocuous library and later...

Crypto companies are losing ground to deepfake attacks
2024-11-28 04:30

The crypto sector stands out as the only surveyed industry where deepfake fraud surpasses traditional document fraud in prevalence, according to Regula. Crypto companies suffer significant losses...