CyberSecurity
192,911 vues
122 Publications
Tendance
Récents
🚨 Uniswap Founder’s Twitter Account Hacked for Scam Promotion 🚨
#Uniswap founder Hayden Adams' Twitter account was compromised, and a #scam tweet was posted falsely claiming users' tokens were at risk due to an exploit in the platform's #Permit2 contract.
The tweet encouraged followers to click on a malicious link. Crypto Twitter members quickly identified the scam and warned others.
Web3 Security Alerts channel on Telegram notified followers about the account compromise. Several nearly identical scam tweets were posted, though the first one was taken down after a few minutes. Adams' accounts with #MetaMask and Coinbase Wallet were also reported to be blocked.
#CyberSecurity
#Uniswap founder Hayden Adams' Twitter account was compromised, and a #scam tweet was posted falsely claiming users' tokens were at risk due to an exploit in the platform's #Permit2 contract.
The tweet encouraged followers to click on a malicious link. Crypto Twitter members quickly identified the scam and warned others.
Web3 Security Alerts channel on Telegram notified followers about the account compromise. Several nearly identical scam tweets were posted, though the first one was taken down after a few minutes. Adams' accounts with #MetaMask and Coinbase Wallet were also reported to be blocked.
#CyberSecurity
🔐 Bitfinex reports a phishing attack, assures system and funds remain unharmed, cooperates with authorities, and reaches out to affected customers. #CyberSecurity #BitcoinWorld 🚫💼📞
🔐🔍 #CertiK, a blockchain security firm, revealed a vulnerability in #WorldCoin's iris scanner, The Orb, that could bypass identity verification 🚫👁️. WorldCoin has since fixed the issue, ensuring user security 🛡️💼. Details to follow at an appropriate time 📅.
#CryptoNews #Blockchain #CyberSecurity 🚀🔗
#CryptoNews #Blockchain #CyberSecurity 🚀🔗
🚨🚨🚨 Attention to all #TrustWallet IOS uses.
⚡ @TrustWallet found critical vulnerability in iMessage of #iphone Users. Your data such as passwords, docs and photos might be compromised.
💡To protect your data switch of iMessage going to settings - >messages.
#CyberSecurity #CyberThreats
⚡ @TrustWallet found critical vulnerability in iMessage of #iphone Users. Your data such as passwords, docs and photos might be compromised.
💡To protect your data switch of iMessage going to settings - >messages.
#CyberSecurity #CyberThreats
🔓💻 Peckshield reports, "Over 48 major hacking incidents occurred in July, causing approximately $165M in damages (excluding the multi-chain $209M breach). The top 5 incidents represented 95% of July's hacking damage" 📈💰
#CyberSecurity #CryptoNews #Peckshield ⚠️🔗
#CyberSecurity #CryptoNews #Peckshield ⚠️🔗
Is #ripple 's Security Breach Bigger Than We Thought?
Chris Larsen, co-founder of Ripple, recently fell victim to a cyber theft resulting in the loss of $112 million worth of XRP from his accounts. Initially perceived as a targeted attack on an individual's digital assets, the incident has taken a more concerning turn following an investigation by Hacken, a prominent #CyberSecurity firm. Their probe uncovered connections between two compromised wallets and what is referred to as "XRP's authorized wallet," suggesting broader security implications for the #cryptocurrency .
Hacken's investigation revealed a complex network of transactions spanning various exchange addresses, with Kraken identified as a key channel for money laundering.
Further analysis uncovered a wallet with historical ties to XRP, having previously interacted with the same Kraken wallet in 2020. This wallet was also linked to another account that withdrew funds into a different exchange during the theft. The discovery of two wallets connected to XRP's authorized nest suggests a systemic breach larger than initially thought.
In response to the security breach, Larsen confirmed the hacking of several of his personal XRP accounts. Immediate measures were taken to mitigate the impact, including informing exchanges like Binance to block these addresses and involving law enforcement in the investigation. The theft of approximately 213 million XRP has raised significant concerns within the cryptocurrency ecosystem.
Amid rumors of a security breach within Ripple's managed wallets, CEO Brad Garlinghouse issued a strong rebuttal. He dismissed the allegations as irresponsible, stating that no wallets managed by Ripple were compromised and highlighting the robustness of their security protocols. However, the incident has led to a shift in market confidence, resulting in fluctuating prices for XRP following the unexpected revelation.
Source - coingape.com
#CryptoNews #BinanceSquare
Chris Larsen, co-founder of Ripple, recently fell victim to a cyber theft resulting in the loss of $112 million worth of XRP from his accounts. Initially perceived as a targeted attack on an individual's digital assets, the incident has taken a more concerning turn following an investigation by Hacken, a prominent #CyberSecurity firm. Their probe uncovered connections between two compromised wallets and what is referred to as "XRP's authorized wallet," suggesting broader security implications for the #cryptocurrency .
Hacken's investigation revealed a complex network of transactions spanning various exchange addresses, with Kraken identified as a key channel for money laundering.
Further analysis uncovered a wallet with historical ties to XRP, having previously interacted with the same Kraken wallet in 2020. This wallet was also linked to another account that withdrew funds into a different exchange during the theft. The discovery of two wallets connected to XRP's authorized nest suggests a systemic breach larger than initially thought.
In response to the security breach, Larsen confirmed the hacking of several of his personal XRP accounts. Immediate measures were taken to mitigate the impact, including informing exchanges like Binance to block these addresses and involving law enforcement in the investigation. The theft of approximately 213 million XRP has raised significant concerns within the cryptocurrency ecosystem.
Amid rumors of a security breach within Ripple's managed wallets, CEO Brad Garlinghouse issued a strong rebuttal. He dismissed the allegations as irresponsible, stating that no wallets managed by Ripple were compromised and highlighting the robustness of their security protocols. However, the incident has led to a shift in market confidence, resulting in fluctuating prices for XRP following the unexpected revelation.
Source - coingape.com
#CryptoNews #BinanceSquare
🔒🌐 Slowmist's Web3 security report reveals insights! 💡 The week of August 28 to September 3 saw 7 security incidents in the Web3 sector, resulting in approximately $830,000 in losses. Discord channel hijacking incidents are on the rise, though overall damage has decreased compared to the prior week. Notable incidents include mnemonic leaks during Ivan Bianco's live broadcast, Starkware, Babysia Rugful, Lama Finance Discord hack, Balthazar Discord hack, Cordi Finance Rugful, and Bit Browser private key hacking. Stay vigilant about security in the evolving Web3 landscape! 🛡️👁️🗨️ #Web3SecurityReport #IncidentInsights #CyberSecurity
🕵️♂️ Seoul Metropolitan Police and FBI collaborate to expose North Korean hacking group 'Andariel,' which targeted defense firms, research institutes, and pharmaceutical companies to steal technology, including laser anti-aircraft weapons. The group extorted 470 million won in Bitcoin from affected companies, many of which did not report the attacks due to trust concerns. 💼💻 #CyberSecurity
👉👉👉 #SEC Statement on the Hack of Its X Account and the Resulting Fake #BitcoinETF💰💰💰 Approval Announcement
In response to the unauthorized access and hacking of its @SECGov X.com account, the U.S. Securities and Exchange Commission (SEC) issued a statement on the incident. The SEC reported that on January 9, 2024, shortly after 4:00 pm ET, an unauthorized party gained control of the @SECGov X.com account by compromising the associated phone number. The intruder posted a fake announcement at 4:11 pm ET, falsely claiming the Commission's approval of spot bitcoin exchange-traded funds, followed by another post saying "$BTC." The second post was deleted, but the first one remained. The unauthorized party also liked two posts from non-SEC accounts.
Upon discovering the breach, the SEC took swift action. The Office of Public Affairs posted on the official @garygensler X.com account at 4:26 pm ET, alerting the public to the compromise, the false announcement, and clarifying that the SEC had not approved spot bitcoin exchange-traded products. The SEC staff deleted the unauthorized post, un-liked the two external posts, and, by 4:42 pm ET, made a new post on @SECGov confirming the account compromise. The SEC contacted X.com for assistance in terminating the unauthorized access, and based on current information, the unauthorized access was terminated between 4:40 pm ET and 5:30 pm ET.
The SEC is evaluating the #CyberSecurity incident's impact on the agency, investors, and the marketplace. Although no evidence suggests unauthorized access to SEC systems or data, concerns about social media account security are acknowledged. SEC staff is collaborating with law enforcement, including the Office of Inspector General, FBI, and DHS's Cybersecurity and Infrastructure Security Agency. Updates will be provided, emphasizing official announcements on the SEC website, not through social media.
Source - coindesk.com
#CryptoNews #BinanceSquare
In response to the unauthorized access and hacking of its @SECGov X.com account, the U.S. Securities and Exchange Commission (SEC) issued a statement on the incident. The SEC reported that on January 9, 2024, shortly after 4:00 pm ET, an unauthorized party gained control of the @SECGov X.com account by compromising the associated phone number. The intruder posted a fake announcement at 4:11 pm ET, falsely claiming the Commission's approval of spot bitcoin exchange-traded funds, followed by another post saying "$BTC." The second post was deleted, but the first one remained. The unauthorized party also liked two posts from non-SEC accounts.
Upon discovering the breach, the SEC took swift action. The Office of Public Affairs posted on the official @garygensler X.com account at 4:26 pm ET, alerting the public to the compromise, the false announcement, and clarifying that the SEC had not approved spot bitcoin exchange-traded products. The SEC staff deleted the unauthorized post, un-liked the two external posts, and, by 4:42 pm ET, made a new post on @SECGov confirming the account compromise. The SEC contacted X.com for assistance in terminating the unauthorized access, and based on current information, the unauthorized access was terminated between 4:40 pm ET and 5:30 pm ET.
The SEC is evaluating the #CyberSecurity incident's impact on the agency, investors, and the marketplace. Although no evidence suggests unauthorized access to SEC systems or data, concerns about social media account security are acknowledged. SEC staff is collaborating with law enforcement, including the Office of Inspector General, FBI, and DHS's Cybersecurity and Infrastructure Security Agency. Updates will be provided, emphasizing official announcements on the SEC website, not through social media.
Source - coindesk.com
#CryptoNews #BinanceSquare
🚨 Attention OKX Wallet Users 🚨
Certik, the blockchain security firm, issues a warning! ⚠️ Update your iOS app ASAP to patch a critical Remote Code Execution (RCE) vulnerability found in the previous version.
Using the old version may jeopardize sensitive data and crypto assets. Certik applauds OKX for swift action, releasing an update today.
🤔 No word on stolen funds yet. OKX is yet to respond to CoinDesk's request for comment. Stay secure, update now!
#BlockchainSecurity #OKXWallet #CyberSecurity #Certik #CryptoNews🔒📰🚫
Certik, the blockchain security firm, issues a warning! ⚠️ Update your iOS app ASAP to patch a critical Remote Code Execution (RCE) vulnerability found in the previous version.
Using the old version may jeopardize sensitive data and crypto assets. Certik applauds OKX for swift action, releasing an update today.
🤔 No word on stolen funds yet. OKX is yet to respond to CoinDesk's request for comment. Stay secure, update now!
#BlockchainSecurity #OKXWallet #CyberSecurity #Certik #CryptoNews🔒📰🚫
ALTA Announces Strategic Partnership with Vibranium Audits
Announces Strategic Partnership
The agreement between ALTA and Vibranium represents to fortify and shield all blockchain network. Recognizing the criticality of blockchain network security, we unite our forces, empowering industries across the board to combat cyber threats and forge a future where safety and resilience prevail.
About Vibranium:
Vibranium Audits is a trusted cyber attack protection company that offers comprehensive services to protect businesses and individuals against potential cyber threats. With the increasing frequency and complexity of cyber attacks, it is essential to have the right defense mechanisms in place. Vibranium Audits provides expert penetration testing, vulnerability assessments, and proof of reserves services to ensure the protection of critical assets and sensitive information. With Vibranium Audits, you can be assured that your security is always a top priority.
Mandeep Singh, CEO at Vibranium: “Through this partnership, we aim to empower blockchain startups by offering them discounted access to our top-notch auditing services. Together with ALTA, we will equip these projects with the tools and confidence they need to succeed in the competitive blockchain landscape. ”
Serhii Viatkin, CCO at ALTA: " Our company's strategy and Vibranium Audit are very similar. Now together we will strive for a more secure blockchain industry. The digital hygiene of the founders is very important because it all affects the reputation and uniqueness of blockchain technology."
About ALTA:
ALTA is a blockchain accelerator and consultancy that is committed to driving the mass adoption of distributed ledger technology (DLT) and blockchain solutions. The company offers a broad range of services to selected startups, including mentorship, due diligence, effective marketing, outreach strategies, and connections to funds, investors, and launchpads.
ALTA's key connections with venture capital funds and investors provide full access to a network of industry experts, advisors, and mentors who can assist startups in growing and scaling their businesses. Through ALTA's scaling and localization efforts, projects can increase their visibility and improve their chances of climbing the top 100 rankings on CoinMarketCap or gaining global recognition.
Yurii Chernikov, Head of Quality Assurance at ALTA: "Embracing the significance of cyber security, we join forces with Vibranium in a strategic partnership that places our customers' protection at the forefront. Together, we build a robust shield against cyber attacks, ensuring the safety of our valued clients and fostering a steadfast commitment to their security."
Ral Andrew, CTO at Vibranium: “Our partnership with ALTA enables us to extend our cutting-edge auditing services to a broader range of blockchain projects. By working together, we are committed to driving the mass adoption of distributed ledger technology and ensuring the utmost security and integrity within the ecosystem.”
The agreement between ALTA and Vibranium represents to fortify and shield all blockchain network. Recognizing the criticality of blockchain network security, we unite our forces, empowering industries across the board to combat cyber threats and forge a future where safety and resilience prevail.
About Vibranium:
Vibranium Audits is a trusted cyber attack protection company that offers comprehensive services to protect businesses and individuals against potential cyber threats. With the increasing frequency and complexity of cyber attacks, it is essential to have the right defense mechanisms in place. Vibranium Audits provides expert penetration testing, vulnerability assessments, and proof of reserves services to ensure the protection of critical assets and sensitive information. With Vibranium Audits, you can be assured that your security is always a top priority.
Mandeep Singh, CEO at Vibranium: “Through this partnership, we aim to empower blockchain startups by offering them discounted access to our top-notch auditing services. Together with ALTA, we will equip these projects with the tools and confidence they need to succeed in the competitive blockchain landscape. ”
Serhii Viatkin, CCO at ALTA: " Our company's strategy and Vibranium Audit are very similar. Now together we will strive for a more secure blockchain industry. The digital hygiene of the founders is very important because it all affects the reputation and uniqueness of blockchain technology."
About ALTA:
ALTA is a blockchain accelerator and consultancy that is committed to driving the mass adoption of distributed ledger technology (DLT) and blockchain solutions. The company offers a broad range of services to selected startups, including mentorship, due diligence, effective marketing, outreach strategies, and connections to funds, investors, and launchpads.
ALTA's key connections with venture capital funds and investors provide full access to a network of industry experts, advisors, and mentors who can assist startups in growing and scaling their businesses. Through ALTA's scaling and localization efforts, projects can increase their visibility and improve their chances of climbing the top 100 rankings on CoinMarketCap or gaining global recognition.
Yurii Chernikov, Head of Quality Assurance at ALTA: "Embracing the significance of cyber security, we join forces with Vibranium in a strategic partnership that places our customers' protection at the forefront. Together, we build a robust shield against cyber attacks, ensuring the safety of our valued clients and fostering a steadfast commitment to their security."
Ral Andrew, CTO at Vibranium: “Our partnership with ALTA enables us to extend our cutting-edge auditing services to a broader range of blockchain projects. By working together, we are committed to driving the mass adoption of distributed ledger technology and ensuring the utmost security and integrity within the ecosystem.”
🕵️ KyberSwap hacker's address identified! 💻🔍 1,000 ETH transferred to Tornado Cash; Security firm Pecshield deals with $48.8M hack damage. 💰🔒 #CyberSecurity #CryptoHack
Just in: #Atomic Wallet is offering up to $100K for finding major security flaws, with a total reward pool of $1M. Hackers can earn $500 to $10K for various levels of vulnerabilities, from high to critical risk. #CyberSecurity
Hacking Forgotten Whale Wallets
There are many wallets which have 50-1000 Bitcoins. These wallets are created in 2009-2011 which seed phrases are forgotton.
Back then, people used to put seed phrase with 8 characters or 6 words.
This wallet.dat files are created via Bitcoin Core (aka Satoshi Client) which was the first wallet app.
There are some wallet.dat files which are being sold on internet however most of them are corrupted with programs. So never buy them!!!
For instance, pictures I added. If you could pass the seedphrase 50 BTC would be yours. However its not quite possible if password is longer than 13-14 characters or more than 6 words. (and if you don’t have multiple strong gpus)
These wallets are encrypted and only correct password can decrypt them. Until now, we saw some wallets from old times are cracked by hackers and emptied.
Soon, bitcoin core will stop supporting to add wallet files from old era, because many people trying to crack these wallets.
- Don’t forget and keep in mind that its illegal and unethical to crack hash of someone else’s wallets
- Always put a strong password for your cold wallets, 24 words if possible !
- I heard many people who got scammed while buying this wallets for 50$ which are actually corrupted and even if you find the correct password it doesn’t decrypt the wallet
#HotTrends #TrendingTopic #Bitcoin #CyberSecurity
Back then, people used to put seed phrase with 8 characters or 6 words.
This wallet.dat files are created via Bitcoin Core (aka Satoshi Client) which was the first wallet app.
There are some wallet.dat files which are being sold on internet however most of them are corrupted with programs. So never buy them!!!
For instance, pictures I added. If you could pass the seedphrase 50 BTC would be yours. However its not quite possible if password is longer than 13-14 characters or more than 6 words. (and if you don’t have multiple strong gpus)
These wallets are encrypted and only correct password can decrypt them. Until now, we saw some wallets from old times are cracked by hackers and emptied.
Soon, bitcoin core will stop supporting to add wallet files from old era, because many people trying to crack these wallets.
- Don’t forget and keep in mind that its illegal and unethical to crack hash of someone else’s wallets
- Always put a strong password for your cold wallets, 24 words if possible !
- I heard many people who got scammed while buying this wallets for 50$ which are actually corrupted and even if you find the correct password it doesn’t decrypt the wallet
#HotTrends #TrendingTopic #Bitcoin #CyberSecurity
🔐 Multiple Web3 projects reportedly targeted by North Korean hackers, with attempts involving sharing files containing hidden malicious code, according to Cos, founder of security company Slow Mist. 🌐🛡️ #CyberSecurity #Web3Projects
👉👉👉 Inferno Drainer #Cryptoscam still a threat despite previous shut down: Report
In a recent report, Singaporean #CyberSecurity firm Group-IB has shed light on the persistent threat posed by the 'scam-as-a-service' known as Inferno Drainer within the #cryptocurrency realm. The study reveals that since late March 2023, Inferno Drainer, utilizing 16,000 domains for phishing attacks, successfully pilfered $80 million from crypto users. Despite its shutdown in November 2023, the report titled 'Burnout: Inferno Drainer’s multimillion-dollar scam scheme detailed' underscores that the menace still hangs over the crypto market.
Inferno Drainer emerged on the scene in November 2022, rapidly evolving into one of the most adept crypto drainers within a year. Functioning as a 'drainer,' this service specialized in stealing cryptocurrencies through various deceptive methods, primarily focusing on phishing attacks.
The closure of Inferno Drainer in November 2023, announced by its developers, did not entirely eliminate the threat, as former users could have transitioned to alternative schemes. Group-IB analysts caution that there remains a risk that Inferno Drainer has not been completely eradicated.
The report highlights the extensive phishing operation involving 16,000 unique domains, mimicking over 100 crypto brands. Cybercriminals skillfully impersonated popular crypto entities and Web3 protocols like Seaport, WalletConnect, and Coinbase, luring victims to phishing sites. These fraudulent platforms initiated unauthorized transactions by duping users into connecting their accounts, promising financial rewards.
The report reveals Inferno Drainer's sophisticated operation crafting fake crypto project websites on platforms like X and Discord. Despite its halt, Group-IB warns of evolving cyber threats in the crypto space, calling for increased vigilance and enhanced security measures.
Source - cryptobriefing.com
#CryptoNews #BinanceSquare
In a recent report, Singaporean #CyberSecurity firm Group-IB has shed light on the persistent threat posed by the 'scam-as-a-service' known as Inferno Drainer within the #cryptocurrency realm. The study reveals that since late March 2023, Inferno Drainer, utilizing 16,000 domains for phishing attacks, successfully pilfered $80 million from crypto users. Despite its shutdown in November 2023, the report titled 'Burnout: Inferno Drainer’s multimillion-dollar scam scheme detailed' underscores that the menace still hangs over the crypto market.
Inferno Drainer emerged on the scene in November 2022, rapidly evolving into one of the most adept crypto drainers within a year. Functioning as a 'drainer,' this service specialized in stealing cryptocurrencies through various deceptive methods, primarily focusing on phishing attacks.
The closure of Inferno Drainer in November 2023, announced by its developers, did not entirely eliminate the threat, as former users could have transitioned to alternative schemes. Group-IB analysts caution that there remains a risk that Inferno Drainer has not been completely eradicated.
The report highlights the extensive phishing operation involving 16,000 unique domains, mimicking over 100 crypto brands. Cybercriminals skillfully impersonated popular crypto entities and Web3 protocols like Seaport, WalletConnect, and Coinbase, luring victims to phishing sites. These fraudulent platforms initiated unauthorized transactions by duping users into connecting their accounts, promising financial rewards.
The report reveals Inferno Drainer's sophisticated operation crafting fake crypto project websites on platforms like X and Discord. Despite its halt, Group-IB warns of evolving cyber threats in the crypto space, calling for increased vigilance and enhanced security measures.
Source - cryptobriefing.com
#CryptoNews #BinanceSquare
Mumbai Police saves 3 from falling prey to cyber frauds, recovers Rs 17 lakh 😱😱😱
The fraudsters established communication with the victims, won their trust and defrauded them of lakhs of rupees. Different cases under sections for cheating and under the IT Act have been registered against unknown persons.
The Mumbai Police along with cyber detection officials saved three people from falling prey to cyber attacks.
The fraudsters established communication with the victims, won their trust and defrauded them of lakhs of rupees. Different cases under sections for cheating and under the Information Technology Act have been registered against unknown persons.
A total of Rs 17 lakhs has been frozen by the cyber sleuths, sources told India Today.
$CYBER #Cyber #CyberAttack #CyberSecurity #fraud
The fraudsters established communication with the victims, won their trust and defrauded them of lakhs of rupees. Different cases under sections for cheating and under the IT Act have been registered against unknown persons.
The Mumbai Police along with cyber detection officials saved three people from falling prey to cyber attacks.
The fraudsters established communication with the victims, won their trust and defrauded them of lakhs of rupees. Different cases under sections for cheating and under the Information Technology Act have been registered against unknown persons.
A total of Rs 17 lakhs has been frozen by the cyber sleuths, sources told India Today.
$CYBER #Cyber #CyberAttack #CyberSecurity #fraud
