The Hacker News

APRIL 13, 2024

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 Shakeeb Ahmed, the defendant in question, pled guilty to one count of computer fraud in December 2023 following his arrest in July. "At

Engineering 118

Engineering Cryptocurrency Hacking 118

Malwarebytes

SEPTEMBER 20, 2023

The dangers of cryptocurrency phishing are back in the news, after tech investor Mark Cuban was reported to have lost around $870k via a phishing link. As for the specifics of the phishing tactic deployed, Cuban is reported as saying he may have downloaded a bogus wallet tool via a search engine query.

Cryptocurrency 105

Cryptocurrency Scams Phishing Engineering 105

Bleeping Computer

DECEMBER 15, 2023

Former Amazon security engineer Shakeeb Ahmed pleaded guilty this week to hacking and stealing over $12.3 million from two cryptocurrency exchanges in July 2022. [.]

Engineering 114

Engineering Hacking Cryptocurrency 114

Security Affairs

NOVEMBER 5, 2023

North Korea-linked Lazarus group is using new KandyKorn macOS Malware in attacks against blockchain engineers. North Korea-linked Lazarus APT group were spotted using new KandyKorn macOS malware in attacks against blockchain engineers, reported Elastic Security Labs. ” reads the report. Stage 1 (Dropper) – testSpeed.py

Engineering 97

Engineering Malware Cryptocurrency Encryption 97

Krebs on Security

NOVEMBER 21, 2020

Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week. 13, with an attack on cryptocurrency trading platform liquid.com. “Our security team investigated and confirmed threat actor activity, including social engineering of a limited number of GoDaddy employees.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Trend Micro

OCTOBER 3, 2022

The parasitic Water Labbu capitalizes on the social engineering schemes of other scammers, injecting malicious JavaScript code into their malicious decentralized application websites to steal cryptocurrency.

Cryptocurrency 112

Cryptocurrency Social Engineering Engineering Cyber threats 112

Security Boulevard

APRIL 14, 2023

Cryptocurrency-related phishing attacks are on the rise, with a report from Kaspersky recording an increase of 40% in 2022 compared to the previous year. The post Cryptocurrency Phishing Threats Luring New Victims appeared first on Security Boulevard.

Cryptocurrency 98

Cryptocurrency Phishing Threat Reports Social Engineering 98

eSecurity Planet

DECEMBER 21, 2021

Cryptocurrency Fuels Ransomware. One constant in all this will be cryptocurrency, the coin of the realm when it comes to ransomware. Cryptocurrency really is fueling this in a sense. … If you were to take cryptocurrency away from that, they don’t have a convenient digital platform.

Cryptocurrency 140

Cryptocurrency Ransomware Cybercrime Social Engineering 140

Graham Cluley

JULY 13, 2023

A computer security engineer has been charged in connection with a multi-million dollar hack of a cryptocurrency exchange. Read more in my article on the Hot for Security blog.

Cryptocurrency 67

Cryptocurrency Hacking Cybersecurity Engineering 67

Heimadal Security

APRIL 5, 2021

Software developers have reported a series of malicious activities on their repositories, having the end purpose of mining cryptocurrency. The attacks have been happening since November 2020, the first report being made by a French software engineer.

Cryptocurrency 86

Cryptocurrency Engineering Software Malware 86

SecureWorld News

APRIL 21, 2022

Treasury Department warning of a North Korean state-sponsored advanced persistent threat (APT) known as the Lazarus Group targeting cryptocurrency and blockchain companies. The threat actors use social engineering to encourage individuals to download trojanized cryptocurrency applications on Windows or macOS operating systems.

Cryptocurrency 82

Cryptocurrency Computers and Electronics Social Engineering System Administration 82

Security Boulevard

APRIL 30, 2021

Are you investing in cryptocurrency or thinking about it? Be sure to listen or watch our April monthly show for our top 3 ways to keep your cryptocurrency safe! ** Links mentioned on the show ** 10 Ways to Keep Your Cryptocurrency Safe [link] Beware of These Top Bitcoin Scams [link] 9 Best Crypto Wallets […].

Cryptocurrency 116

Cryptocurrency Scams Social Engineering Engineering 116

Security Affairs

DECEMBER 26, 2022

The FBI warns of cybercriminals using search engine advertisement services to impersonate brands and defraud users. The FBI is warning of cyber criminals using search engine advertisement services to impersonate brands and direct users to websites that were used to defraud users. ” reads the advisory published by the FBI.

Advertising 90

Advertising Engineering Education Internet 90

Security Boulevard

DECEMBER 9, 2021

A crypto support bot scam discovered in May has now increased and widened its breadth of targeted cryptocurrency users. If the user falls for it, the scammer then works on the user, using social engineering to obtain the recovery phrase for the user’s cryptocurrency account.

Cryptocurrency 78

Cryptocurrency Scams Social Engineering Engineering 78

CyberSecurity Insiders

MARCH 10, 2022

But here’s a news piece that gives details of a ransomware group that paid $6 million in salaries last year and even tried to develop its cryptocurrency. The gang also has a bunch of developers, network penetration testers, admins, QA, engineer experts, OSINT, and those who keep a track of transactions and wallet funds.

Cryptocurrency 119

Cryptocurrency Ransomware Banking Hacking 119

Security Affairs

SEPTEMBER 9, 2022

US authorities recovered more than $30 million worth of cryptocurrency stolen by the North Korea-linked Lazarus APT from Axie Infinity. A report from The Block published in July and citing two people familiar with the matter revealed that threat actors targeted a senior engineer at the company with a fake job offer via LinkedIn.

Cryptocurrency 115

Cryptocurrency Spyware Engineering Hacking 115

SecureWorld News

JANUARY 20, 2023

Popular email marketing service MailChimp recently fell victim to another data breach, this time caused by a successful social engineering attack on its employees and contractors. The incident was limited to 133 accounts, and there is no evidence that this compromise affected any other systems or customer data beyond these MailChimp accounts.

Social Engineering 89

Social Engineering Data breaches Engineering Accountability 89

Security Affairs

JULY 19, 2022

FBI has warned of crooks developing malicious cryptocurrency-themed apps to steal crypto assets from the users. Federal Bureau of Investigation (FBI) has warned of crooks creating malicious cryptocurrency-themed apps to steal crypto assets from investors. SecurityAffairs – hacking, cryptocurrency-themed apps). million. .”

Cryptocurrency 104

Cryptocurrency Mobile Hacking Accountability 104

Krebs on Security

APRIL 4, 2024

The disclosure revealed a profitable network of phishing sites that behave and look like the real Privnote, except that any messages containing cryptocurrency addresses will be automatically altered to include a different payment address controlled by the scammers. co showing the site did indeed swap out any cryptocurrency addresses.

Phishing 213

Phishing Cryptocurrency DDOS Internet 213

Malwarebytes

JULY 19, 2022

Together with the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA), the FBI has released a warning about cybercriminals creating fraudulent cryptocurrency investment apps in order to defraud cryptocurrency investors. Stay safe, everyone!

Cryptocurrency 80

Cryptocurrency Mobile Banking Internet 80

SecureList

JANUARY 13, 2022

Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks. It appears that BlueNoroff shifted focus from hitting banks and SWIFT-connected servers to solely cryptocurrency businesses as the main source of the group’s illegal income. Note, this is no proof that the companies listed were compromised.

Cryptocurrency 131

Cryptocurrency Malware Accountability Banking 131

SecureWorld News

AUGUST 19, 2021

Department of Justice (DOJ) announced that an Ohio resident, Larry Dean Harmon, pleaded guilty to money laundering through the use of Helix, a Dark Web cryptocurrency laundering service. Court documents say that Helix was associated with "Grams," which is a Dark Web search engine also operated by Harmon. billion.

Cryptocurrency 97

Cryptocurrency Marketing Advertising Engineering 97

Security Boulevard

APRIL 13, 2021

The post Shashi Prakash Chats about Cryptocurrency and NFT Fraud appeared first on TechSpective. The post Shashi Prakash Chats about Cryptocurrency and NFT Fraud appeared first on Security Boulevard.

Cryptocurrency 97

Cryptocurrency Technology Social Engineering Engineering 97

Schneier on Security

JANUARY 4, 2023

Maintaining bitcoin and other cryptocurrencies causes about 0.3 As many cryptocurrencies crash and the FTX bankruptcy moves into the litigation stage, regulators are likely to scrutinize the cryptocurrency world more than ever before. The good news is that cryptocurrencies don’t have to be carbon intensive.

Cryptocurrency 49

Cryptocurrency Government Engineering Technology 49

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Malwarebytes

AUGUST 26, 2021

In August of 2021, a thief stole about $600 million in cryptocurrencies from The Poly Network. Slightly more than one week later, Japanese cryptocurrency exchange Liquid was hacked and lost $97 million worth of digital coins. They are not available for every cryptocurrency. We can’t answer the first question for you.

Cryptocurrency 101

Cryptocurrency Banking Hacking Engineering 101

Threatpost

NOVEMBER 23, 2020

‘Vishing’ attack on GoDaddy employees gave fraudsters access to cryptocurrency service domains NiceHash, Liquid.

Cryptocurrency 121

Cryptocurrency Social Engineering VPN Engineering 121

Security Boulevard

MARCH 15, 2024

This crypto phishing kit, part of an elaborate attack scheme dubbed CryptoChameleon, is strategically engineered to focus on mobile devices, raising concerns about the security of cryptocurrency services.

Phishing 105

Phishing Cryptocurrency Mobile Engineering 105

Identity IQ

JUNE 1, 2023

The Rise of AI Social Engineering Scams IdentityIQ In today’s digital age, social engineering scams have become an increasingly prevalent threat. Social engineering scams leverage psychological manipulation to deceive individuals and exploit the victims’ trust. This was a 3% increase compared to the previous year.

Social Engineering 52

Social Engineering Scams Engineering Identity Theft 52

Security Affairs

AUGUST 23, 2019

The Ukrainian Secret Service (SBU) launched an investigation after employees at a local nuclear power plant connected some systems of the internal network to the Internet to mine cryptocurrency. On July 10, agents of the SBU raided the nuclear power plant and discovered the equipment used by the employees to mining cryptocurrency.

Cryptocurrency 97

Cryptocurrency Advertising Engineering Internet 97

Trend Micro

AUGUST 8, 2021

We found a new social engineering-based malvertising campaign targeting Japan that delivered a malicious application. The malicious application abused sideloading vulnerabilities to load and start the Cinobi banking trojan.

Banking 124

Banking Social Engineering Cryptocurrency Engineering 124

Dark Reading

OCTOBER 12, 2023

Cryptocurrency apps were the most high risk for exposing sensitive information, a reverse-engineering study shows.

Authentication 111

Authentication Encryption Cryptocurrency Engineering 111

Security Affairs

NOVEMBER 24, 2020

Crooks were able to hijack traffic and email to various cryptocurrency-related websites as a result of a DNS hijacking attack on domains managed by GoDaddy. The threat actors were able to modify DNS settings by tricking GoDaddy employees into handing over the control of the targeted domains with social engineering attacks.

Social Engineering 100

Social Engineering Engineering DNS Data breaches 100

Security Boulevard

NOVEMBER 20, 2023

Crypto phishing scams are fraudulent activities designed to steal your cryptocurrency assets, typically by tricking you into revealing your private keys or sending your cryptocurrencies to the scammer’s wallet. These scams often involve deception, social engineering, and manipulation.

Scams 72

Scams Phishing Social Engineering Cryptocurrency 72

Penetration Testing

DECEMBER 18, 2023

Former senior cybersecurity engineer of an American IT company, Shakeeb Ahmed, has admitted his guilt in hacking two decentralized cryptocurrency exchanges and stealing digital assets valued at over $12.3

Penetration Testing 79

Penetration Testing Cryptocurrency Engineering Hacking 79

Security Affairs

MARCH 28, 2019

In 2018, the Lazarus APT group targeted several cryptocurrency exchanges , including the campaign tracked as Operation AppleJeus discovered in August 2018. The C2 server script names are disguised as WordPress (popular blog engine) files as well as those of other popular open source projects.” ” Kaspersky says. .

Cryptocurrency 88

Cryptocurrency Malware Advertising Antivirus 88

SecureWorld News

SEPTEMBER 9, 2021

Then there was the money laundering, the cryptocurrency, the digital wallets. Business email compromise scheme and social engineering. Social engineering—in person—was the next part of the scheme. Those are some of the highlights, now let's look at a few specifics. Too many do.

Social Engineering 71

Social Engineering Engineering Banking Cybercrime 71