U.S. DoJ announces the arrest of Anatoly Legkodymov, the co-founder of Hong Kong-based #cryptocurrency exchange Bitzlato, for aiding criminals, including ransomware attackers and drug trafficking.

Read details: https://thehackernews.com/2023/01/bitzlato-crypto-exchange-founder.html

Beware of the new campaign targeting poorly managed MS SQL servers!

A powerful malware called "CLR SqlShell" is exploiting vulnerable database servers for #cryptocurrency mining and ransomware attacks.

Read: https://thehackernews.com/2023/05/clr-sqlshell-malware-targets-ms-sql.html

Four U.S. nationals charged in $80 MILLION pig butchering #cryptocurrency investment scam. If convicted, they could face 20 years in prison.

Learn more: https://thehackernews.com/2023/12/four-us-nationals-charged-in-80-million.html

🚨Glupteba botnet upgrades with UEFI firmware stealth tech, making it undetectable by regular antivirus. This nasty malware steals info, mines #cryptocurrency , and attacks your router.

Learn more: https://thehackernews.com/2024/02/glupteba-botnet-evades-detection-with.html

A former cybersecurity engineer has been sentenced to three years in prison for stealing $12.3 MILLION from two decentralized #cryptocurrency exchanges by manipulating smart contracts and exploiting vulnerabilities.

https://thehackernews.com/2024/04/ex-security-engineer-jailed-3-years-for.html

North Korean threat actors are publishing malicious packages on the npm registry targeting developers and stealing #cryptocurrency.

Read: https://thehackernews.com/2024/08/north-korean-hackers-target-developers.html

It's time to double-check your dependencies! Be proactive in securing your development environment.

⚠️ Singapore authorities arrest six individuals, including five Chinese nationals, linked to a global #cybercrime syndicate.

Laptops, phones, cash & over $850,000 in #cryptocurrency seized—showing the scale of the operation.

Learn more: https://thehackernews.com/2024/09/singapore-police-arrest-six-for-alleged.html

🚨 Alert: Binance warns of a global clipper #malware threat targeting #cryptocurrency users, intercepting wallet addresses to divert funds to rogue wallets. Significant financial losses reported.

Read: https://thehackernews.com/2024/09/binance-warns-of-rising-clipper-malware.html

Be cautious when downloading apps or plugins!

⚠️ Rhadamanthys Stealer now leverages AI-powered Optical Character Recognition (OCR) to target #cryptocurrency wallets by extracting seed phrases from images.

Learn how this malware is evolving: https://thehackernews.com/2024/10/ai-powered-rhadamanthys-stealer-targets.html

Fake PyPI packages posed as #cryptocurrency wallet recovery tools, stealing sensitive info. Attackers used dynamic dead drop resolvers, showing evolving tactics to evade detection.

Learn more: https://thehackernews.com/2024/10/pypi-repository-found-hosting-fake.html

North Korea's Lazarus Group exploits a zero-day #vulnerability (CVE-2024-4947) in Google Chrome to target the #cryptocurrency sector.

Exploitation strategy involved social media manipulation and fake game promotions.

Learn more: https://thehackernews.com/2024/10/lazarus-group-exploits-google-chrome.html

TeamTNT shifts tactics to target Docker environments for #cryptocurrency mining by exploiting exposed daemons to deploy malware and cryptominers.

Read: https://thehackernews.com/2024/10/notorious-hacker-group-teamtnt-launches.html

Researchers have uncovered a malicious Python package posing as a #cryptocurrency trading tool. Downloaded over 1,300 times before removal, this #malware affects Windows and macOS systems.

Read: https://thehackernews.com/2024/10/researchers-uncover-python-package.html

🕵️‍♂️💰 The founder of Bitcoin Fog, a major #cryptocurrency mixer, sentenced to 12+ years for laundering over $400M tied to darknet crime.

Read the full story 👇 https://thehackernews.com/2024/11/bitcoin-fog-founder-sentenced-to-12.html

U.K. National Crime Agency has disrupted Russian money laundering networks, leading to 84 arrests and the seizure of £20 million in cash and #cryptocurrency.

These networks weren’t just about money—they funded Russian espionage and connected to cybercriminal gangs across the globe.

🔗 Read more: https://thehackernews.com/2024/12/nca-busts-russian-crypto-networks.html

🚨 Cybercriminals are luring Web3 professionals into traps using fake video conferencing apps.

These apps deliver "Realst," an information stealer targeting sensitive data like #cryptocurrency wallets and Telegram credentials.

Read here: https://thehackernews.com/2024/12/hackers-using-fake-video-conferencing.html

Sanctioned #cryptocurrency exchange Grinex is shutting down after a $13.74M hack.

Stolen funds were quickly moved and swapped to avoid freezing. The platform is linked to Garantex, flagged for laundering over $100M.

🔗 Read → https://thehackernews.com/2026/04/1374m-hack-shuts-down-sanctioned-grinex.html

🚨 TCLBANKER, a previously undocumented Brazilian banking trojan, is targeting 59 banking, fintech, and #cryptocurrency platforms.

The malware spreads through #WhatsApp Web and Microsoft Outlook, using DLL side-loading, keylogging, and fake credential overlays to evade detection and steal banking credentials.

Read: https://thehackernews.com/2026/05/tclbanker-banking-trojan-targets.html

⚠️ A fake “Google Notes” extension is swapping #cryptocurrency wallet addresses inside Chromium browsers.

Experts call it "Silent Swap"

Unsigned .NET and Golang installers inject the extension, alter browser preference files, and use EtherHiding to rotate C2.

Details here ➝ https://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.html

🛑 WARNING - Hackers exploited the "Ill Bloom" flaw to drain $3.1 million from 431 #cryptocurrency wallets.

Weak recovery phrase generation left some older mobile wallets created between 2016 and 2018 exposed, potentially allowing attackers to reconstruct private keys and gain unauthorized access.

Check the details on THN 🠖 https://thehackernews.com/2026/07/attackers-exploit-ill-bloom.html