U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced new sanctions targeting Iranian cyber actors as part of Operation Economic Outcast, an economic…
Tag: cryptocurrency
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
A set of 40 malicious Mozilla Firefox extensions has been discovered masquerading as popular Web3 products like OKX, Rabby Wallet, and TronLink…
wincfg: Go-Based Stealer Payload
wincfg is a Go-based stealer payload used in the StubMaker campaign. It extracts credentials from Chromium-based browsers, collects cryptocurrency wallets and seed…
SafePal Data Breach: Authorization Flaw Exposes Data of Nearly 40,000 Customers
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the personal information of approximately 39,798…
AmnesiaStealer: New Rust-Based macOS Malware Hijacks Chromium Sessions for Live Browser Control
Cybersecurity researchers have uncovered a new macOS-oriented, Rust-based information stealer called AmnesiaStealer that hijacks Chromium web browsers to steal session data and…
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
Huntress researchers have uncovered a new ClickFix-style attack campaign targeting macOS users with a Go-based stealer malware capable of stealing cryptocurrency, browser…
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
Blockchain security firm Coinspect has identified a critical vulnerability in the popular JavaScript cryptography library CryptoJS, specifically in the CryptoJS.lib.WordArray.random() function, which…
Ill Bloom: Cryptocurrency Wallet Drain Campaign
A threat actor exploited the CryptoJS weak RNG to drain over $5.7 million from cryptocurrency wallets across multiple networks.
Adform Supply-Chain Attack Swaps Crypto Wallet Addresses via Poisoned JavaScript
Attackers compromised a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.…
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…