KONNI APT targets APAC developers with AI-generated malware disguised as crypto projects. The "polished" backdoor steals wallets & credentials.
Blockchain
Mandiant exposed UNC5142 for using EtherHiding—hiding malicious JavaScript in BNB Smart Chain smart contracts—to create a resilient C2 and distribute VIDAR/ATOMIC to 14,000+ sites.
Google exposed UNC5342 (DPRK APT) using EtherHiding—hiding JADESNOW/INVISIBLEFERRET malware in BNB/Ethereum smart contracts—for a resilient, nation-state C2 infrastructure.
The U.S. Treasury is exploring a plan to embed digital identity verification directly into DeFi smart contracts to combat money laundering and other illicit finance.
The privacy coin Monero suffers a 51% attack from the Qubic mining pool, leading to a block reorganization, suspended withdrawals, and a price drop.
In response to the GENIUS Act, the SEC launches "Project Crypto," an initiative to modernize US crypto regulation, reclassify digital assets, and bring crypto innovation onshore.
President Trump signed the bipartisan "GENIUS Act," a landmark law creating a clear regulatory framework for the US stablecoin market, aiming to secure the dollar's digital dominance.
TRM Labs' analysis of the Nobitex hack reveals Iran's crypto exchange was engineered for sanctions evasion, featuring deep fiat integration and blockchain obfuscation to defy surveillance.
North Korean APT Famous Chollima (Wagemole) is using a new Python-based RAT, PylangGhost, in fake job interviews to target crypto professionals and steal credentials.
BitoPro confirms $11.5M hot wallet cyberattack after investigator @zachxbt exposed the theft. User funds are safe, but initial silence raises concerns.
A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.
Threat actor UTG-Q-015 is escalating operations, using 0-days and watering hole attacks against government, finance, and AI in Asia.
A malicious PyPI package named 'solana-token' targeted Solana developers to steal code and secrets. Learn how it worked and how to stay safe.
Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.
This communication, articulated in Chinese, English, Russian, and Korean, entailed an offer of a $10 million reward for the return of the stolen assets
Let's explore how this Blockchian development technology is going to change the face of e-commerce. Blockchain Will Be The Driving Force Behind E-Commerce In Future