Cybercrime | ForkLog

ForkLog 58 20.03.2025

Ben Zhou: Majority of Stolen Bybit Funds Remain Traceable

Approximately 89% of the funds stolen from Bybit, amounting to around 500,000 ETH, remain traceable, according to Bybit’s CEO Ben Zhou. 3.20.25 Executive Summary on Hacked Funds: Hacker started to use mixers: 1. Wasbi 2. CryptoMixer 3. Railgun 4. TornadoCashTotal hacked funds of USD 1.4bn around 500k ETH. 88.87% remain traceable, 7.59% have gone dark, […]

AI translated

ForkLog 96 20.03.2025

Experts Warn of Malware-Infested TradingView Premium Software

Malicious actors are promoting a compromised version of TradingView Premium containing malware capable of stealing personal data and users’ crypto assets, according to experts from Malwarebytes. “We have heard of victims whose crypto wallets were emptied, after which criminals sent phishing links on their behalf,” noted the firm’s senior security researcher, Jérôme Segura. According to […]

AI translated

ForkLog 25 19.03.2025

Crypto Address ‘Poisoning’ Nets Hackers $1.2 Million in Three Weeks

Since the beginning of March, victims of cryptocurrency address spoofing scams have voluntarily sent over $1.2 million to fraudsters. This was reported by analysts from Cyvers. ?Alert?Our AI-powered threat detection system has identified a sharp increase in #addresspoisoning attacks. Since the beginning of March 2025, over $1.2M has been unknowingly sent to scammer-controlled addresses. ? […]

AI translated

ForkLog 31 18.03.2025

Hackers Disguise as Novice Traders to Launder Cryptocurrency

Malefactors are employing a novel method to launder cryptocurrency, disguising their actions as errors made by inexperienced traders, according to DL News, citing experts. Hackers create swaps vulnerable to arbitrage bot attacks, which they themselves control. This tactic is used by the Lazarus Group, among others. These transactions exhibit all the characteristics typically associated with […]

AI translated

ForkLog 36 18.03.2025

Microsoft Warns of Trojan Targeting Cryptocurrency Wallets

Researchers from Microsoft Incident Response have identified a new remote access trojan (RAT) named StilachiRAT, aimed at stealing cryptocurrencies and user credentials. The malware targets 20 different extensions in the Google Chrome browser, including MetaMask, Coinbase Wallet, Trust Wallet, OKX Wallet, Bitget Wallet, and Phantom. Simultaneously, StilachiRAT extracts and decrypts saved logins and passwords. The […]

AI translated

ForkLog 22 17.03.2025

Wemix Clarifies Delay in Disclosing $6.2 Million Hack

The South Korean Wemix Foundation delayed the disclosure of a significant $6.2 million hack to prevent market panic. The incident occurred on February 28, but was officially announced on March 4, according to Yonhap. The company’s CEO, Kim Seok-hwan, publicly apologized and stated that the decision was made to prevent further attacks and minimize consequences. […]

AI translated

ForkLog 19 17.03.2025

North Korean Hackers’ Bitcoin Holdings Surpass Those of El Salvador and Bhutan

The North Korean hacker group Lazarus currently holds 13,518 BTC (valued at $1.13 billion at the time of writing), surpassing the amounts held in the government wallets of Bhutan or El Salvador. This is according to data from Arkham Intelligence. For comparison, Bhutan holds 10,635 BTC. The kingdom is actively increasing its reserves through mining, […]

AI translated

ForkLog 28 17.03.2025

Phishing Emails Impersonate Coinbase and Gemini, Users Warned

Reports have emerged on X about a new phishing attack. Fraudsters, posing as representatives of the exchanges Coinbase and Gemini, are urging users to transfer their assets to new wallets using pre-generated seed phrases. Looks like massive phishing scams ongoing. Got two emails targeting @coinbase and @Gemini users. Everyone be safe! pic.twitter.com/ceP1jqWQ1Z — Sukesh Tedla […]

AI translated

ForkLog 38 13.03.2025

North Korean Hackers Exploit Zoom to Target Crypto Entrepreneurs

North Korean hackers are orchestrating fake Zoom calls with crypto project founders, posing as venture capitalists, to steal confidential information. Having audio issues on your Zoom call? That’s not a VC, it’s North Korean hackers. Fortunately, this founder realized what was going on. The call starts with a few “VCs” on the call. They send […]

AI translated

ForkLog 22 13.03.2025

Lazarus Group Hackers Transfer 400 ETH to Tornado Cash

Experts at CertiK have detected a transfer of 400 ETH (~$752,000) to the crypto mixer Tornado Cash. It is believed that the funds were moved by hackers from the Lazarus Group. #CertiKInsight ? We have detected deposit of 400 ETH in https://t.co/0lwPdz0OWi on Ethereum from:0xdB31a812261d599A3fAe74Ac44b1A2d4e5d009010xB23D61CeE73b455536EF8F8f8A5BadDf8D5af848. The fund traces to the Lazarus group’s activity on the […]

AI translated

ForkLog 47 13.03.2025

DB News X Account Hacked to Promote Fake TRUMP and Hyperliquid News

The X account of the crypto news aggregator DB News was hacked to spread false information about the meme coin TRUMP and the Hyperliquid project. Journalist Colin Wu was the first to report this. DB claims that its Twitter account was hacked, leading to the posting of fake news. Earlier, it had reported that the […]

AI translated

ForkLog 61 13.03.2025

Sandwich-attack victim swapped $732,583 for $18,636

A cryptocurrency trader swapped about $732,583 in USDC for about $18,636 in USDT across six separate swaps, falling victim to a large sandwich attack. Unknown entity got sandwiched for 714k today on six separate USDC -> USDT swaps. (Traded with 100% slippage allowed.) They swapped 732583.429405 USDC for 18636.232611 USDT. A promised ?: pic.twitter.com/0rFNE4DfoP — […]

AI translated

#Cybercrime