Do Son A new Android banking trojan, RatOn, merges overlay fraud with NFC relay attacks, automated money transfers, and crypto wallet theft, posing a new threat to users.
cryptocurrency
Salat Stealer, a new Go-based MaaS, is hijacking browsers and crypto wallets. The malware is sold by Russian-speaking operators on the dark web.
A new report reveals that the Lazarus Group is actively monitoring CTI platforms to evade detection and sustain a ClickFix phishing campaign against the cryptocurrency sector.
The U.S. Treasury has sanctioned individuals and entities linked to a North Korean IT worker scheme, which funnels millions of dollars to the regime's weapons programs.
The U.S. Treasury is exploring a plan to embed digital identity verification directly into DeFi smart contracts to combat money laundering and other illicit finance.
Google Play now requires custodial crypto wallet providers in 15+ jurisdictions to obtain licenses. Non-custodial wallets are exempt from the new rules.
An Ethereum developer lost funds to a fake AI extension that stole his private key, highlighting how even experts can fall victim to sophisticated phishing attacks.
The privacy coin Monero suffers a 51% attack from the Qubic mining pool, leading to a block reorganization, suspended withdrawals, and a price drop.
Kaspersky exposes Efimer, a new crypto-stealer using fake legal threats and malicious torrents from compromised WordPress sites to hijack wallets and brute-force other sites.
A coordinated campaign by GreedyBear used 150+ malicious Firefox extensions and fake sites to steal over $1M in crypto. They are now using a new technique called Extension Hollowing to evade detection.
GitLab researchers uncovered a crypto scam on PyPI. Typosquatted Bittensor packages hijacked staking functions to silently drain users' crypto wallets.
Beware of fake Binance ads! This multi-stage malware campaign uses Facebook to trick crypto users, stealing credentials and sensitive data. Stay safe with our tips.
Veracode warns of a North Korean cyber-espionage campaign using malicious NPM packages to spread Beavertail malware and steal crypto from developers via fake interview tasks.
In response to the GENIUS Act, the SEC launches "Project Crypto," an initiative to modernize US crypto regulation, reclassify digital assets, and bring crypto innovation onshore.
A CoinDCX software engineer, Rahul Agarwal, has been arrested in connection with a $44M crypto heist after an internal probe linked the breach to his compromised work laptop.
Check Point Research exposes JSCEAL, a stealthy malware campaign using malvertising and fake apps to steal crypto credentials and wallets via compiled JavaScript payloads.
PayPal introduces "Pay with Crypto," allowing US merchants to accept over 100 cryptocurrencies, with funds converting to fiat or PYUSD at low transaction fees (0.99% for first year).PayPal, Crypto Payments, Cryptocurrency, Merchants, Bitcoin, Ethereum, PYUSD, Stablecoin, Transaction Fees, US
eSentire unveils Cyber Stealer, a new infostealer-botnet hybrid offered as a service, fusing data theft, remote control, crypto mining, and DDoS attacks into one scalable toolkit.
LARVA-208 is targeting Web3 developers with fake AI platforms (like Norlax AI) and job lures to deploy Fickle Stealer malware, aiming to steal crypto and sensitive data.
President Trump signed the bipartisan "GENIUS Act," a landmark law creating a clear regulatory framework for the US stablecoin market, aiming to secure the dollar's digital dominance.
A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials.