Mandiant, which operates under Google Cloud, has tracked the suspected North Korean scammers since 2018, and AI has helped scale up malicious attacks since November 2025.
Malware News
- News3365
- News
A researcher uncovered a 149 million-credential dump from infostealer malware, including 420,000 Binance logins, exposing growing risks to crypto users.
4678 - News
Kaspersky found a new malware, dubbed Stealka, that disguises itself as game mods and pirated software to steal crypto wallets, passwords, and browser data.
2682 - News
Cloudflare found over 5% of global emails were malicious in 2025, peaking near 10% in November, with more than half of them containing deceptive links.
2649 - News
A malicious Chrome extension called Crypto Copilot lets users trade Solana directly from X but secretly skims a small portion of the transaction.
3314 - News
A researcher warned that more than 400 NPM libraries, including at least 10 crypto packages mostly tied to ENS, were compromised by Shai Hulud malware.
7004 - News
Alert: A WhatsApp worm is spreading a banking trojan in Brazil, targeting crypto wallets and financial logins.
9149 - News
Private key theft has become an automated, industrialized threat, highlighting the need for crypto users to remain vigilant, according to a report by GK8, a subsidiary of Galaxy Digital.
4849 - News
MetaMask has partnered with other major crypto wallet providers to launch a real-time phishing defense network, allowing anyone to “prevent the next major phishing attack.”
7794 - News
Security Alliance has developed TLS Attestations to cryptographically verify phishing reports, solving the problem of scammers cloaking malicious content.
5169 - News
Unity has patched a vulnerability discovered in June that allowed malicious code execution in Android games, which could be used to target crypto users.
3955 - News
There is a Unity engine vulnerability that allows third parties to inject code into mobile games, potentially compromising crypto wallets, sources have told Cointelegraph.
7492 - News
Hacken’s Stephen Ajayi told Cointelegraph that basic wallet hygiene and endpoint hardening are essential to defend against threats like ModStealer.
9089 - News
Hackers broke into the node package manager (NPM) account of a well-known software developer and added malware to popular JavaScript libraries, targeting crypto wallets.
11915 - News
ReversingLabs researchers uncovered two NPM packages that used Ethereum smart contracts to hide malicious URLs and bypass security scans.
12455