7 articles tagged with #wallet-theft. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
A fraudulent Ledger Live application was discovered on Apple's App Store, successfully impersonating the legitimate cryptocurrency wallet and draining approximately $9.5 million from dozens of users across multiple blockchains during a week-long phishing campaign before removal.
Europol coordinated a major takedown of three infostelaler malware variants—SocGholish, Amadey, and StealC—that targeted cryptocurrency wallets and passwords, resulting in €41 million ($47 million USD) in frozen digital assets. The operation represents a significant law enforcement victory against organized cybercrime infrastructure that threatened crypto users globally.
Kaspersky discovered dozens of malicious Wallpaper Engine packages on Steam's Workshop containing Lumma and Vidar infostealers designed to harvest cryptocurrency wallet data and browser credentials. The malware, which accumulated thousands of installations, represents a sophisticated supply-chain attack exploiting a legitimate platform to target crypto users.
Microsoft has identified two malicious npm packages that distribute remote access trojan (RAT) malware capable of stealing cryptocurrency wallet credentials, screenshots, and keystrokes through Hugging Face infrastructure. The discovery highlights a critical supply chain vulnerability in JavaScript development ecosystems that directly threatens crypto users and developers.
A sophisticated supply chain attack dubbed TrapDoor targeted developers across crypto, DeFi, AI, and security sectors by distributing malicious packages designed to steal wallet credentials, SSH keys, GitHub tokens, and cloud credentials. The campaign demonstrates escalating risks in open-source development ecosystems where attackers exploit developer trust to compromise both individual assets and organizational infrastructure.
CrowdStrike and Google successfully dismantled the Glassworm botnet, which targeted software developers and compromised cryptocurrency wallets. The takedown underscores critical vulnerabilities in open source supply chains and blockchain security infrastructure that pose systemic risks to the ecosystem.
Musician G. Love lost 5.9 Bitcoin (approximately $420,000) after downloading a malicious app that deceived him into revealing sensitive wallet credentials. The incident highlights the growing threat of sophisticated social engineering attacks targeting cryptocurrency holders, regardless of their technical sophistication.
