Black Hat Hacker

Twelve more people have been charged in a cybercrime case involving the theft of over $263 million in cryptocurrency. The gang used hacking and social tricks to steal funds, which they spent on luxury cars, nightclubs, and expensive goods.

A Russian hacking group, Cold River, deployed new malware called "LOSTKEYS" to steal sensitive data from high-profile Western targets. The malware uses deceptive tactics to infiltrate systems and gather intelligence, marking an escalation in Cold River's cyber espionage activities.

Alexander Gurevich, accused in the $190M Nomad Bridge hack, arrested in Israel while fleeing. Faces U.S. extradition and up to 20 years in prison.

The Vancouver Canucks' X account was hacked just before the NHL Draft Lottery and used to promote a fake cryptocurrency and deepfake Elon Musk video. Hackers also replied to fans to appear real, while the team worked with the NHL and X to regain control.

Kraken caught a North Korean hacker trying to get a job by spotting inconsistencies during the interview process. The crypto firm used the opportunity to uncover a network of fake identities linked to state-backed cybercrime.

In 2024, Americans lost at least $9.3 billion to crypto scams, making up more than half of the $16.6 billion total reported losses from internet crimes. The FBI ramped up efforts to tackle fraud, preventing $286 million in losses through initiatives like Operation Level Up.

Hackers have used phishing attacks to access Japanese brokerage accounts, inflating penny stock prices globally, causing over $710 million in fraudulent transactions. Despite measures by brokers, the number of unauthorised trades and reports of fraud has surged dramatically, leaving many investors facing financial losses.

North Korean hackers are expanding their operations to target European companies, using fake identities to infiltrate businesses, including blockchain projects. Law enforcement has taken action, but the hackers continue to earn significant amounts while posing a growing threat to cybersecurity worldwide.

A new Android malware, Crocodilus, uses social engineering and fake overlays to steal crypto wallet seed phrases, bypassing security features. Targeting users in Spain and Turkey, it has remote access capabilities and can bypass two-factor authentication.

Attackers used address poisoning on the EOS blockchain, sending tiny amounts of EOS to users to manipulate them into copying and pasting fake wallet addresses. This led to users mistakenly sending funds to fraudulent wallets, raising concerns about blockchain security.