Malicious code in tnesorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7bdde09ea070dc3aac0b7102490f33b1fba0895e62b305870e3e5d163b0df44a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallerr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef7bd9b657dae07d3652b636de4724cd526ddb346bf73185bfa7265e1acd276c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in matlpotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8cdaee17ffe6d975225f53bc27bd439cf924ecaf516dea4db005004c5228439d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsop4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6af2e8f4adec980c99435be70ee4ffbf7ca18a0234c40216d1de2fa8c39dd4f3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocckets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22a623634d4c58d45c628745614209f4029f75be625422e24ba5bff710f8a138 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyber attack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users' digital currencies. "With maliciously implanted code, the altered APK led to the leak of user's...

New Laplas Clipper Malware Targeting Cryptocurrency Users via SmokeLoader

Cryptocurrency users are being targeted with a new clipper malware strain dubbed Laplas by means of another malware known as SmokeLoader. SmokeLoader, which is delivered by means of weaponized documents sent through spear-phishing emails, further acts as a conduit for other commodity trojans like...

Binance Hackers Minted $569M in Crypto—Then It Got Complicated

Plus: The US warns of a mysterious military contractor breach, a "poisoned" version of the Tor Browser is tracking Chinese users, and more...

“Ethical Hacker” Stole Half a Million in Crypto Form Elderly Person

By Waqas The victim had hired the "ethical hacker" Aaron Daniel Motta to install a security system in their residence.… This is a post from HackRead.com Read the original post: "Ethical Hacker" Stole Half a Million in Crypto Form Elderly Person...

A week in security (January 31 – February 6)

Last week on Malwarebytes Labs: Threat actor steals email with Zimbra zero-day FBI warns of bogus job postings on recruitment sites Investment scams are on the rise A worrying Etsy listing reveals the stalking potential of Apple’s AirTags Beware bogus OperaGX sponsorship offers $320 milllion stol...

Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams

Misconfigurations in smart contracts are being exploited by scammers to create malicious cryptocurrency tokens with the goal of stealing funds from unsuspecting users. The instances of token fraud in the wild include hiding 99% fee functions and concealing backdoor routines, researchers from Chec...

North Korean APTs Stole ~$400M in Crypto in 2021

Vast amounts of cash sloshing around in cryptocurrency markets are proving irresistible for cybercriminals and scammers of all kinds. From basic financial pump-and-dump schemes to straight-up nation-state cybertheft, nascent crypto markets, and their investors – often with dubious understanding o...

Crypto-Exchange BitMart to Pay Users for $200M Theft

Cryptocurrency exchange BitMart has pledged to dig into its own pocket to pay back users affected in a cyberattack that drained it of about $150 million worth of cryptocurrencies, according to a tweet put out by BitMart CEO Sheldon Xia on Monday. 2/4 BitMart will use our own funding to cover the...

Hacker stole $55M worth of crypto from DeFi lender bZx via phishing

By Waqas The hack took place after one of the bZx's employees was sent a phishing email embedded with a malicious macro hidden in an MS word document, This is a post from HackRead.com Read the original post: Hacker stole $55M worth of crypto from DeFi lender bZx via phishing...

Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users

By Waqas working to reimburse the customers for the funds they have lost and help them regain control of their accounts. Here's what happened. This is a post from HackRead.com Read the original post: Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users...

10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities

Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S. The Europol-coordinated year-long investigation was...

Italy CERT Warns of a New Credential Stealing Android Malware

Researchers have disclosed a new family of Android malware that abuses accessibility services in the device to hijack user credentials and record audio and video. Dubbed "Oscorp" by Italy's CERT-AGID and spotted by AddressIntel, the malware "induces the user to install an accessibility service wi...

AIRDROPX BORN Security Vulnerability

AIRDROPX BORN is an API token service from AIRDROPX BORN that can be used to convert and exchange Bitcoin with other network coins. A security vulnerability exists in AIRDROPX BORN version 2019-05-29 and earlier versions, which stems from a misspelling of the name of the constructor function in t...

Sim swapping hackers charged with stealing $2.5m worth of crypto

By Uzair Amir These hackers are part of the group called "The Community." According to an announcement made by the U.S. Department of Justice DoJ, six men have been charged for SIM swapping fraud that resulted in the theft of nearly $2.5 million $2,416,352 worth of cryptocurrency. The six men are...

Wall Street market exit scam? Admins steal $30 million worth of crypto

By Uzair Amir Wall Street market vendors on the dark web are urging others not to deposit their coins. As you may know, a majority of the dark web users are migrating to the Wall Street marketplace after the closure of the Dream market. Initially, this migration was successful but now a significa...