Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware

Slow Pisces (aka Jade Sleet, TraderTraitor, PUKCHONG) is a North Korean state-sponsored threat group primarily focused on generating revenue for the DPRK regime, typically by targeting large organizations in the cryptocurrency sector. This article analyzes their campaign that we believe Read More …

Financial cyberthreats in 2024

As more and more financial transactions are conducted in digital form each year, financial threats comprise a large piece of the global cyberthreat landscape. That’s why Kaspersky researchers analyze the trends related to these threats and share an annual report Read More …

AMOS and Lumma stealers actively spread to Reddit users

Malwarebytes Labs were alerted to Mac and Windows stealers currently distributed via Reddit posts targeting users engaging in cryptocurrency trading. One of the common lures is a cracked software version of the popular trading platform TradingView. The crooks are posting Read More …

Crypto exchange Bybit says it fully replenished reserves after record $1.5 billion hack

Bybit said it replenished its reserves following a $1.5 billion hack last week, the largest in the history of the crypto industry. In less than 72 hours, Bybit pieced together hundreds of thousands of ether tokens through a mix of Read More …

North Korean Hackers Were Behind Crypto’s Largest ‘Theft of All Time’

Blockchain analytics firm Arkham Intelligence said North Korea’s Lazarus Group was behind Bybit’s $1.46 billion hack. In an earlier post on social media platform X, Arkham offered a bounty of 50,000 ARKM tokens for anyone who could identify the attackers Read More …

Argentine judge investigates fraud case against President Milei over crypto promotion

A judge in Argentina was selected Monday to investigate allegations of fraud against President Javier Milei for his brief promotion of a cryptocurrency whose value collapsed within hours of its launch last week. Milei distanced himself from the scandal and Read More …

The Crypto Game of Lazarus APT: Investors vs. Zero-days

On May 13, 2024, Kaspersky consumer-grade product Kaspersky Total Security detected a new Manuscrypt infection on the personal computer of a person living in Russia. Since Lazarus rarely attacks individuals, this piqued Kaspersky researchers interest and they decided to take Read More …

UK data watchdog investigating MoneyGram data breach

The U.K.’s data protection regulator has confirmed it’s investigating MoneyGram after receiving a data breach report from the U.S.-based money transfer giant. The U.K.’s Information Commissioner’s Office, which requires that organizations report data breaches within 72 hours of discovering the Read More …

North Korea Aggressively Targeting Crypto Industry with Well-Disguised Social Engineering Attacks

The Democratic People’s Republic of Korea (“DPRK” aka North Korea) is conducting highly tailored, difficult-to-detect social engineering campaigns against employees of decentralized finance (“DeFi”), cryptocurrency, and similar businesses to deploy malware and steal company cryptocurrency. North Korean social engineering schemes Read More …

FBI Warns of Scammers Impersonating Cryptocurrency Exchanges

The FBI warns of scammers impersonating cryptocurrency exchange employees to steal funds. How the scam works: The scammer contacts the victim via an unsolicited call or message and pretends to be a cryptocurrency exchange employee. The scammer conveys urgency and Read More …