MSC-2023-18369

@ledgerhq/connect-kit allows web3 apps to connect to Ledger hardware wallets. Versions 1.1.5, 1.1.6, 1.1.7 were compromised by a threat actor to include malicious code that automatically steals crypto and NFT's from wallets that connect to the app. Those versions were deleted and we recommend...

MSC-2023-18368

@ledgerhq/connect-kit allows web3 apps to connect to Ledger hardware wallets. Versions 1.1.5, 1.1.6, 1.1.7 were compromised by a threat actor to include malicious code that automatically steals crypto and NFT's from wallets that connect to the app. Those versions were deleted and we recommend...

Lazarus Group uses KandyKorn macOS malware for crypto theft

By Deeba Ahmed Another day, another malware operation by the infamous Lazarus group targeting blockchain engineers and crypto users. This is a post from HackRead.com Read the original post: Lazarus Group uses KandyKorn macOS malware for crypto theft...

New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets

Cybersecurity researchers have unearthed a Python variant of a stealer malware NodeStealer that's equipped to fully take over Facebook business accounts as well as siphon cryptocurrency. Palo Alto Networks Unit 42 said it detected the previously undocumented strain as part of a campaign that...

Sneaky DoubleFinger loads GreetingGhoul targeting your cryptocurrency

Introduction Stealing cryptocurrencies is nothing new. For example, the Mt. Gox exchange was robbed of many bitcoins back in the beginning of 2010s. Attackers such as those behind the Coinvault ransomware were after your Bitcoin wallets, too. Since then, stealing cryptocurrencies has continued to...

Atomic Wallet Hit by $35M Theft in Recent Crypto Breach

By Habiba Rashid The stolen tokens include popular cryptocurrencies such as Bitcoin BTC, ether ETH, tether USDT, dogecoin DOGE, Litecoin LTC, BNB coin BNB, and polygon MATIC. This is a post from HackRead.com Read the original post: Atomic Wallet Hit by $35M Theft in Recent Crypto Breach...

Hackers Steal Over $1.6 Million in Crypto from General Bytes Bitcoin ATMs Using Zero-Day Flaw

Bitcoin ATM maker General Bytes disclosed that unidentified threat actors stole cryptocurrency from hot wallets by exploiting a zero-day security flaw in its software. "The attacker was able to upload his own java application remotely via the master service interface used by terminals to upload...

Lookalike Telegram and WhatsApp Websites Distributing Cryptocurrency Stealing Malware

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. "All of them are after victims' cryptocurrency funds, with several targeting cryptocurrency wallets," ES...

Malicious code in gitypthon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e42f7093f305e473294541a190c806673f88d9d16bda7876d5a02115983395b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-tooblelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cb593da74433bdac1fd6d90034b07d77f04f399903be1c4ddd50473ea23a7355 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pllow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 578f037bb7f7ebf9c55fd32632adfeaca783514c697a1eae17c406d0afcbca4d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cclick (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cf2cf8681fdee6e583798ee2260d2dc71c85de9ca143e8de66530a6c98f14f4d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ptorch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 00f0565a5063de40195605917142fc372bf97900d1abed6df15eab9d19a0b90e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tnesorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7bdde09ea070dc3aac0b7102490f33b1fba0895e62b305870e3e5d163b0df44a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallerr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef7bd9b657dae07d3652b636de4724cd526ddb346bf73185bfa7265e1acd276c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in matlpotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8cdaee17ffe6d975225f53bc27bd439cf924ecaf516dea4db005004c5228439d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsop4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6af2e8f4adec980c99435be70ee4ffbf7ca18a0234c40216d1de2fa8c39dd4f3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocckets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22a623634d4c58d45c628745614209f4029f75be625422e24ba5bff710f8a138 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyber attack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users' digital currencies. "With maliciously implanted code, the altered APK led to the leak of user's...

New Laplas Clipper Malware Targeting Cryptocurrency Users via SmokeLoader

Cryptocurrency users are being targeted with a new clipper malware strain dubbed Laplas by means of another malware known as SmokeLoader. SmokeLoader, which is delivered by means of weaponized documents sent through spear-phishing emails, further acts as a conduit for other commodity trojans like...