40 Malicious Firefox Extensions Steal Crypto Wallet Recovery Phrases, Private Keys and Credentials
cextensions designed to steal wallet recovery phrases, private keys, credentials, and clipboard data. Researchers also identified 37 related deceptive extensions that posed as useful...
Operation ASTERIX Processes 885,000 Phone Numbers to Find Crypto Users for Targeted Fraud
The campaign, called Operation ASTERIX, combined account checks, phishing emails, voice calls, fake wallet apps, and Telegram-based data theft.
The name comes from Asterisk, the...
Malicious VS Code Extension Drops Detached Python Payload Outside the Extension Host
A malicious VS Code extension named “Solidity Pro” is targeting cryptocurrency developers with a multi-stage attack chain that begins inside the editor but ends...
DPRK NullReceiver Malware Hides C2 IPs in Zero-Value Ethereum Transactions
Researchers have identified a new DPRK-linked npm malware technique that hides command-and-control (C2) infrastructure inside ordinary Ethereum transactions.
Named NullReceiver, the method was found...
Crypto Wrench Attacks Surge Worldwide as Criminals Target Investors and Their Families
Cryptocurrency investors are facing a growing physical security threat as criminals increasingly use violence, kidnapping, burglary, and intimidation to steal digital assets.
These incidents,...