Security News

Cybercriminals set their sights on crypto markets
2024-01-02 04:00

The cryptocurrency market has grown significantly, attracting both enthusiasts and investors. The rise of cryptocurrencies has also brought forth an unprecedented need for cybersecurity measures.

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks
2023-12-30 09:30

Cybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. "These threats are unique in their approach, targeting a wide range...

Crypto drainer steals $59 million from 63k people in Twitter ad push
2023-12-21 21:23

Google and Twitter ads are promoting sites containing a cryptocurrency drainer named 'MS Drainer' that has already stolen $59 million from 63,210 victims over the past nine months. According to blockchain data on MS Drainer's activity, one of its Ethereum-chain victims lost $24 million worth of cryptocurrency, while other notable cases involve victims losing between $440,000 and $1.2 million.

Crypto scammers abuse Twitter ‘feature’ to impersonate high-profile accounts
2023-12-20 20:17

Cryptocurrency scammers are abusing a legitimate Twitter "Feature" to promote scams, fake giveaways, and fraudulent Telegram channels used to steal your crypto and NFTs. On X, formerly and more widely known as Twitter, a post's URL consists of the account name of the person who tweeted it and a status ID, as shown below. This allows you to take an URL for a Tweet and modify the account name to whatever you want, even high-profile accounts.

Crypto scammers abuse X 'feature' to impersonate high-profile accounts
2023-12-20 20:17

Cryptocurrency scammers are abusing a legitimate X "Feature" to promote scams, fake giveaways, and fraudulent Telegram channels used to steal your crypto and NFTs. On X, formerly Twitter, a post's URL consists of the account name of the person who tweeted it and a status ID, as shown below. This allows you to take an URL for a Tweet and modify the account name to whatever you want, even high-profile accounts.

Four U.S. Nationals Charged in $80 Million Pig Butchering Crypto Scam
2023-12-18 12:13

Four U.S. nationals have been charged for participating in an illicit scheme that earned them more than $80 million via cryptocurrency investment scams. The defendants – Lu Zhang, 36, of Alhambra,...

Hundreds of thousands of dollars in crypto stolen after Ledger code poisoned
2023-12-16 00:13

Cryptocurrency wallet maker Ledger says someone slipped malicious code into one of its JavaScript libraries to steal more than half a million dollars from victims. The library in question is Connect Kit, which allows DApps - decentralized software applications - to connect to and use people's Ledger hardware wallets.

Ex-Amazon engineer pleads guilty to hacking crypto exchanges
2023-12-15 20:32

Former Amazon security engineer Shakeeb Ahmed pleaded guilty this week to hacking and stealing over $12.3 million from two cryptocurrency exchanges in July 2022. The two affected companies are Nirvana Finance, a decentralized crypto exchange, and an unnamed exchange on the Solana blockchain platform that Ahmed hacked using his blockchain audit and smart contract reverse engineering skills.

Crypto Hardware Wallet Ledger's Supply Chain Breach Results in $600,000 Theft
2023-12-15 13:01

Crypto hardware wallet maker Ledger published a new version of its "@ledgerhq/connect-kit" npm module after unidentified threat actors pushed malicious code that led to the theft of more than...

Ledger dApp supply chain attack steals $600K from crypto wallets
2023-12-14 16:22

Ledger is warnings users not to use web3 dApps after a supply chain attack on the 'Ledger dApp Connect Kit' library was found pushing a JavaScript wallet drainer that stole $600,000 in crypto and NFTs. Ledger is a hardware wallet that lets users buy, manage, and securely store their digital assets offline, supporting multiple cryptocurrencies, including Bitcoin and Ethereum. The company offers a library called the "Ledger dApps Connect Kit" that allows web3 apps to connect to Ledger hardware wallets.