Web3 Archives • Daily CyberSecurity

Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap BlueNoroff Deepfakes Crypto Deepfake Phishing

Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap

Do Son April 28, 2026

Cybersecurity researchers at Arctic Wolf have uncovered a sophisticated, globally distributed campaign by the North Korean state-sponsored...

North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto UNC1069 Fake Meetings ClickFix Malware

North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto

Do Son April 19, 2026

In a sophisticated escalation of cyber-enabled financial theft, security researchers from Validin have unmasked a sprawling campaign...

The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes UNC1069 Phishing BlueNoroff Crypto Theft

The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes

Do Son April 14, 2026

The line between a routine business meeting and a financial breach has never been thinner. Between February...

North Korea’s Contagious Interview APT Uses JSON Keeper and GitLab to Deliver BeaverTail Spyware North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

North Korea’s Contagious Interview APT Uses JSON Keeper and GitLab to Deliver BeaverTail Spyware

Do Son November 17, 2025

Security researchers at NVISO have identified a significant evolution in the long-running Contagious Interview malware campaign, a...

Sui Blockchain Seed Stealer: Malicious Chrome Extension Hides Mnemonic Exfiltration in Microtransactions Chrome Crypto Stealer, Sui Blockchain Exfiltration

Chrome Crypto Stealer, Sui Blockchain Exfiltration

Sui Blockchain Seed Stealer: Malicious Chrome Extension Hides Mnemonic Exfiltration in Microtransactions

Do Son November 14, 2025

The Socket Threat Research Team has uncovered a highly sophisticated malicious Chrome extension posing as an Ethereum...

North Korean APT “Contagious Interview” Floods npm Registry with 338 Malicious Packages to Steal Crypto North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

North Korean APT “Contagious Interview” Floods npm Registry with 338 Malicious Packages to Steal Crypto

Do Son October 11, 2025

The Socket Threat Research Team has sounded the alarm on an escalating wave of malicious npm activity...

LARVA-208: New Web3 Phishing Campaign Leverages Fake AI Platforms & Job Lures to Steal Crypto

Do Son July 22, 2025

A recent investigation by cybersecurity firm PRODAFT has uncovered a targeted and cunning phishing campaign by the...

Darktrace Exposes “Fake Startup” Malware Campaign: Lures Crypto Users with AI/Web3 Apps to Steal Wallets

Do Son July 14, 2025

In a revelation from Darktrace, researchers have uncovered a highly coordinated and ongoing cybercrime campaign that uses...

NimDoor: North Korean APT Uses Nim-Based Malware for Stealthy Web3 & Crypto Attacks on macOS! NimDoor, macOS Malware

NimDoor: North Korean APT Uses Nim-Based Malware for Stealthy Web3 & Crypto Attacks on macOS!

Do Son July 3, 2025

A new wave of North Korean cyberattacks is exploiting macOS systems in Web3 and cryptocurrency startups using...

BitMEX Turns Tables on Lazarus Group: Infiltrates Hacker Infrastructure EV2GO Charging Platform ICSA-26-057-04 Lazarus Group, Crypto Hacks LazyStealer

EV2GO Charging Platform ICSA-26-057-04 Lazarus Group, Crypto Hacks LazyStealer

BitMEX Turns Tables on Lazarus Group: Infiltrates Hacker Infrastructure

Do Son June 3, 2025

In recent years, the North Korean hacking collective known as the Lazarus Group has shifted its focus...

DPRK IT Workers Infiltrate Web3 via OnlyDust and Open Source Platforms

Do Son April 20, 2025

A deep investigation by researchers blackbigswan and Heiner has uncovered a covert operation where North Korean (DPRK)...

ClearFake Malware Variant Exploits Web3 in New Attacks Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

ClearFake Malware Variant Exploits Web3 in New Attacks

Do Son March 19, 2025

A new variant of the ClearFake malware is exploiting Web3 capabilities to enhance its malicious operations, according...

BingX Suffers $44 Million Cyberattack, Highlighting Web3 Security Concerns BingX cyberattack FortiGate SSO Attacks Firewall Config Theft

BingX Suffers $44 Million Cyberattack, Highlighting Web3 Security Concerns

Do Son September 23, 2024

Singapore-based cryptocurrency exchange BingX has reported a significant cyberattack resulting in the loss of over $44 million...

Web3’s Billion-Dollar Bleeding: Cybercrime in DeFi Web3 security

Web3’s Billion-Dollar Bleeding: Cybercrime in DeFi

Do Son September 5, 2024

The rapid growth of Web3 and decentralized finance (DeFi) has transformed the financial landscape, offering unparalleled opportunities...

Tusk Campaign: Russian Cybercriminals Target Gaming & Crypto

Do Son August 16, 2024

Kaspersky Lab has uncovered an international cyber campaign targeting the theft of cryptocurrency and personal data from...

Attackers Exploit Decentralized CDN for Crypto Rewards attack campaign

Attackers Exploit Decentralized CDN for Crypto Rewards

Do Son March 11, 2024

Security researchers have exposed a crafty attack campaign manipulating a decentralized content delivery network (CDN) to reap...

Critical Alert 1 Active Exploit Detected Today