Crypto & Wallets
Exchange hacks, wallet theft and fake crypto apps: what happened and how to protect funds.
Gnosis Pay Data Breach: Legacy Card System Hit, Card and Wallet Details Reported Exposed, 3D Secure Now Mandatory
Gnosis Pay says customer information was exposed in a breach of the legacy system behind its branded cards. Here is what is confirmed, what is only reported, and what to do before the cards stop on December 20.
Mercado Bitcoin Hack: Withdrawals Frozen, Balance Checks Only From November 9, and What to Do if an Exchange Holds Your Crypto
Mercado Bitcoin froze deposits and withdrawals on November 2 after an attack. Its website is due back November 9 for balance checks only. Here is what is confirmed and what businesses should do.
Chainalysis Breach: Password Hashes and Live Tokens Exposed for All Users, What Is Confirmed and What to Reset
Chainalysis now says names, usernames, password hashes and live tokens for all users were exposed, reversing its first statement. Here is what is confirmed, what is not, and what to reset this week.
Fake GitHub Security Tools Spread AsyncRAT: 2,000+ Computers Reported Infected, the Repositories Named and What to Check
Fake security tools and crypto game bots on GitHub are installing AsyncRAT and password stealers on Windows PCs. Here is what Doctor Web's indicators confirm, what is still unverified, and what to check this week.
Crafty Falcon AI Cyber Attacks: India's CERT-In Warns Fintech, Payment and Crypto Firms About AI Pentesting Tools, What Is Confirmed and What to Check
CERT-In has issued a critical advisory naming Crafty Falcon, a group it says uses AI pentesting tools against fintech, payment and crypto firms. Here is what is confirmed, what is not, and what to check this week.
NIKKE Launcher Malware: The Official PC Game Launcher Was Hacked to Steal Passwords, Cookies and Crypto Wallets, and How to Check Work PCs
Attacker code was added to script files on the NIKKE PC launcher's official servers, then used to install a remote-access tool that steals passwords and cookies. Here is what is confirmed and how to check a work PC.
Cryptojacking Case: Canadian Extradited Over Hacks on University Supercomputers, and How to Spot Cryptomining on Your Servers
Federal prosecutors say two Canadian men broke into university networks in four U.S. states and used supercomputers to mine cryptocurrency. Here is what is confirmed and how to check your own servers for hidden miners.
BTCPay Server Hot Wallet Theft: Attackers Drained Servers on 2.4.1 and Earlier, and Why Updating Alone Is Not Enough
BTCPay Server confirms Bitcoin and Litecoin were stolen from hot wallets on servers running 2.4.1 or earlier. If you ran an old version, the project says to sweep funds to a new wallet and move to a fresh server.
Binance Hack: How a Fake Homebrew Install, a Fake Job Interview and an Internal AI Tool Led to a $6.34 Billion Theft, and What Businesses Should Check
Binance says its $6.34 billion theft began with a tampered Homebrew install and a fake job interview, then ran through an internal AI tool. Here is what is confirmed and what to check this week.
