Key Highlights Incarcerated cybercriminal Robert Barr directed a crypto-theft syndicate from HMP Edinburgh between January and April 2024, targeting a local entrepreneur’s holdings valued at over $2.6 million. Two home-invasion attempts failed: the first in January netted a hardware wallet but no PIN or recovery phrase; the second in April was foiled when the homeowner ...
Key Highlights A £10,000 Crimestoppers reward has been announced for information leading to the arrest and conviction of those responsible for a targeted cryptocurrency home robbery in Smith’s Wood, Birmingham. The December 13, 2025 attack involved three masked men who forced entry, assaulted the husband, threatened the pregnant wife with a knife, and demanded a ...
Key Highlights North Korean hacking group WaterPlum, also known as Contagious Interview, stole at least $10.7 million by impersonating recruiters from legitimate crypto and AI companies to target software developers and IT professionals worldwide. The campaign infected over 30,000 devices across more than 100 countries and extracted funds or credentials from over 7,000 cryptocurrency wallets ...
Key Highlights Blockchain security firm SlowMist, in collaboration with the OKX security team, discovered malicious code in FomoPeek versions 1.1 and 1.2 designed to steal private keys, seed phrases, and Keychain data from iOS devices. The malware includes an exploit framework targeting iOS kernel vulnerabilities across versions 12.0 through 18.7 and 26.0–26.1, capable of bypassing ...
Key Highlights A seven-nation intelligence coalition publicly attributed a global cryptocurrency theft campaign to the North Korean group WaterPlum (alias “Contagious Interview”), linking the operation to the 313 General Bureau of the Munitions Industry Department under the Central Committee of the Workers’ Party of Korea. Fake job recruitment schemes targeting software developers compromised over 30,000 ...
North Korea is increasingly recruiting IT workers from third countries—including Iran and Lebanon—to help infiltrate U.S. companies and funnel salaries back to state agencies funding weapons programs, NBC News reported Friday. U.S. Alert Details North Korean IT Worker Scheme A joint advisory issued in July by the U.S. government and several foreign agencies warned that ...
Critical CryptoJS Vulnerability Exposes Wallet Seed Phrases, $5.69M Stolen Blockchain security firm Coinspect has uncovered a critical vulnerability in the random number generator of the widely used CryptoJS library, making recovery phrases in at least five cryptocurrency wallet applications predictable. The flaw has been actively exploited since May, resulting in an estimated minimum of $5.69 ...