Malicious code in requests-tooblelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cb593da74433bdac1fd6d90034b07d77f04f399903be1c4ddd50473ea23a7355 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pllow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 578f037bb7f7ebf9c55fd32632adfeaca783514c697a1eae17c406d0afcbca4d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cclick (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cf2cf8681fdee6e583798ee2260d2dc71c85de9ca143e8de66530a6c98f14f4d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ptorch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 00f0565a5063de40195605917142fc372bf97900d1abed6df15eab9d19a0b90e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tnesorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7bdde09ea070dc3aac0b7102490f33b1fba0895e62b305870e3e5d163b0df44a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallerr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef7bd9b657dae07d3652b636de4724cd526ddb346bf73185bfa7265e1acd276c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in matlpotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8cdaee17ffe6d975225f53bc27bd439cf924ecaf516dea4db005004c5228439d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsop4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6af2e8f4adec980c99435be70ee4ffbf7ca18a0234c40216d1de2fa8c39dd4f3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocckets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22a623634d4c58d45c628745614209f4029f75be625422e24ba5bff710f8a138 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyber attack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users' digital currencies. "With maliciously implanted code, the altered APK led to the leak of user's...

New Laplas Clipper Malware Targeting Cryptocurrency Users via SmokeLoader

Cryptocurrency users are being targeted with a new clipper malware strain dubbed Laplas by means of another malware known as SmokeLoader. SmokeLoader, which is delivered by means of weaponized documents sent through spear-phishing emails, further acts as a conduit for other commodity trojans like...

Binance Hackers Minted $569M in Crypto—Then It Got Complicated

Plus: The US warns of a mysterious military contractor breach, a "poisoned" version of the Tor Browser is tracking Chinese users, and more...

“Ethical Hacker” Stole Half a Million in Crypto Form Elderly Person

By Waqas The victim had hired the "ethical hacker" Aaron Daniel Motta to install a security system in their residence.… This is a post from HackRead.com Read the original post: "Ethical Hacker" Stole Half a Million in Crypto Form Elderly Person...

A week in security (January 31 – February 6)

Last week on Malwarebytes Labs: Threat actor steals email with Zimbra zero-day FBI warns of bogus job postings on recruitment sites Investment scams are on the rise A worrying Etsy listing reveals the stalking potential of Apple’s AirTags Beware bogus OperaGX sponsorship offers $320 milllion stol...

Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams

Misconfigurations in smart contracts are being exploited by scammers to create malicious cryptocurrency tokens with the goal of stealing funds from unsuspecting users. The instances of token fraud in the wild include hiding 99% fee functions and concealing backdoor routines, researchers from Chec...

North Korean APTs Stole ~$400M in Crypto in 2021

Vast amounts of cash sloshing around in cryptocurrency markets are proving irresistible for cybercriminals and scammers of all kinds. From basic financial pump-and-dump schemes to straight-up nation-state cybertheft, nascent crypto markets, and their investors – often with dubious understanding o...

Crypto-Exchange BitMart to Pay Users for $200M Theft

Cryptocurrency exchange BitMart has pledged to dig into its own pocket to pay back users affected in a cyberattack that drained it of about $150 million worth of cryptocurrencies, according to a tweet put out by BitMart CEO Sheldon Xia on Monday. 2/4 BitMart will use our own funding to cover the...

Hacker stole $55M worth of crypto from DeFi lender bZx via phishing

By Waqas The hack took place after one of the bZx's employees was sent a phishing email embedded with a malicious macro hidden in an MS word document, This is a post from HackRead.com Read the original post: Hacker stole $55M worth of crypto from DeFi lender bZx via phishing...

Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users

By Waqas working to reimburse the customers for the funds they have lost and help them regain control of their accounts. Here's what happened. This is a post from HackRead.com Read the original post: Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users...

10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities

Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S. The Europol-coordinated year-long investigation was...