Experimental News Clipping Site

Tag: cryptocurrency theft

  • The Register: Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/26/microsoft_xcsset_macos/ Source: The Register Title: Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects Feedly Summary: Upgraded nasty slips into Xcode builds, steals crypto, and disables macOS defenses The long-running XCSSET malware strain has evolved again, with Microsoft warning of a new macOS variant that expands its bag of tricks while…

  • Slashdot: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/09/20/0542237/self-replicating-worm-affected-several-hundred-npm-packages-including-crowdstrikes Source: Slashdot Title: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s Feedly Summary: AI Summary and Description: Yes Summary: The Shai-Hulud malware campaign has affected numerous npm packages, including those maintained by CrowdStrike, via the injection of malicious scripts designed to steal developer credentials and exfiltrate sensitive information. The campaign highlights…

  • Slashdot: $1M Stolen in ‘Industrial-Scale Crypto Theft’ Using AI-Generated Code

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/08/11/0037258/1m-stolen-in-industrial-scale-crypto-theft-using-ai-generated-code?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: $1M Stolen in ‘Industrial-Scale Crypto Theft’ Using AI-Generated Code Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a sophisticated cybercrime operation, GreedyBear, which utilizes a highly coordinated strategy, weaponizing browser extensions and phishing sites to facilitate industrial-scale crypto theft. The group’s innovative techniques, including the modification…

  • Slashdot: Police Dismantles Botnet Selling Hacked Routers As Residential Proxies

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/05/09/2223226/police-dismantles-botnet-selling-hacked-routers-as-residential-proxies?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Police Dismantles Botnet Selling Hacked Routers As Residential Proxies Feedly Summary: AI Summary and Description: Yes Summary: Law enforcement has dismantled a significant botnet targeting routers over the past two decades, revealing serious vulnerabilities with older devices. The operation, involving international cooperation, underscores the need for robust security measures…

  • The Register: Ripple NPM supply chain attack hunts for private keys

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/23/ripple_npm_supply_chain/ Source: The Register Title: Ripple NPM supply chain attack hunts for private keys Feedly Summary: A mystery thief and a critical CVE involved in crypto cash grab Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency.… AI Summary and Description: Yes Summary: The…

  • Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll…

  • Hacker News: The GitVenom campaign: cryptocurrency theft using GitHub

    —

    by

    Kurt Seifried
    in

    Source URL: https://securelist.com/gitvenom-campaign/115694/ Source: Hacker News Title: The GitVenom campaign: cryptocurrency theft using GitHub Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the GitVenom campaign, which involves threat actors creating fake open-source projects on GitHub to distribute malicious code. These projects appear legitimate and lure unsuspecting users, emphasizing the need for…

  • The Register: Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/24/rather_than_add_a_backdoor/ Source: The Register Title: Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps Feedly Summary: PLUS: SEC launches new crypto crime unit; Phishing toolkit upgraded; and more Infosec in brief Apple has responded to the UK government’s demand for access to its customers’ data stored in iCloud…

  • Cloud Blog: Cybercrime: A Multifaceted National Security Threat

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/cybercrime-multifaceted-national-security-threat/ Source: Cloud Blog Title: Cybercrime: A Multifaceted National Security Threat Feedly Summary: Executive Summary Cybercrime makes up a majority of the malicious activity online and occupies the majority of defenders’ resources. In 2024, Mandiant Consulting responded to almost four times more intrusions conducted by financially motivated actors than state-backed intrusions. Despite this…