cryptohacks

The cryptocurrency exchange WOO X temporarily suspended operations after a massive hack that resulted in a loss of $14 million. The incident, which occurred on July 24, 2025, affected nine user accounts, from which the attackers made unauthorized withdrawals of assets, including $BTC , $ETH, $BNB , and $ARB . According to the platform's statements, the hackers exploited a phishing attack, compromising the device of one of the team members.

Police Scotland reports a dramatic surge in crypto-related crime, with cases increasing by a staggering 2,000% since 2019. The sharp rise is attributed to growing use of cryptocurrencies by organized criminal groups, which are quickly adapting to modern technologies to conceal their activities.
Cryptocurrencies as a Tool for Organized Crime
Digital currencies have become a favored method for money laundering, drug trafficking, and other illegal activities. The anonymity of blockchain transactions allows offenders to evade detection, and many of these transactions occur on the dark web, where crypto enables fast, almost untraceable payments.

Police Response: Tools, Training, and Cooperation
While Police Scotland does not yet have a dedicated crypto unit, it is rapidly developing its capabilities. Officers are using advanced tracking tools and taking part in specialized training and a national working group, which unifies strategies and knowledge across the UK.
In addition to technology, the police rely on international cooperation, working with both UK and foreign enforcement agencies. These efforts are already showing results: in 2024, authorities investigated 58 crypto-related cases, seized assets worth over £7.6 million, and identified more than 150 suspects.
Precedent Case: Confiscated Bitcoin Converted to Cash
A court in Edinburgh approved the confiscation and conversion of 23.5 bitcoins, linked to a violent robbery, into cash worth over £109,000. This legal move marked a milestone in Scottish law enforcement, as it was the first official instance of converting seized cryptocurrency into traditional currency as criminal proceeds.

New Cyber and Fraud Command Unit
Police Scotland plans to establish a specialized Cyber and Fraud Command to enhance coordination, technical expertise, and rapid response to threats. This unit will include trained specialists and new legal tools, enabling better enforcement and asset recovery from crypto-related crimes.

#CryptoCrimes , #CyberSecurity , #CryptoNewsCommunity , #StaySafe , #cryptohacks

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

In a joint statement, the governments of the United States, Japan, and South Korea have highlighted the growing risk posed by North Korean cyberattacks on the global blockchain and cryptocurrency sectors. The warning particularly focuses on the potential threats associated with hiring IT workers from North Korea.
The Threat of North Korean Hackers to the Blockchain Industry
The three nations emphasized in their January 14 statement that North Korean hacking groups, such as the infamous Lazarus Group, are increasingly targeting crypto exchanges and investors. These groups employ sophisticated tactics, including social engineering, and spread malware like TraderTraitor and AppleJeus.
A Call for Caution in IT Recruitment
Government authorities urged companies operating in the web3 and blockchain sectors to thoroughly vet new hires to avoid employing IT professionals from North Korea. Research indicates that such workers often pose as remote employees or investors. The report also mentioned initiatives to foster collaboration between the private and public sectors, such as Crypto-ISAC in the United States, as well as similar efforts in Japan and South Korea.
North Korean Cyberattacks in 2024
In 2024, North Korean cyber groups were linked to several high-profile attacks:
A hack on Japan’s DMM Bitcoin exchange resulted in losses of $308 million.An attack on South Korea’s Upbit platform led to the theft of $50 million.
These incidents underscore the severity of the threat that North Korean activities pose to the global financial system.
Fraudulent Practices by North Korean Hackers
At the Cyberwarcon conference in November 2024, researchers revealed that North Korean hackers often disguise themselves as:
Remote IT workers employed by major tech companies,Recruiters or venture capital investors.
Two specific hacking groups, Sapphire Sleet and Ruby Sleet, allegedly stole $10 million in just six months using these methods.
Collaboration Is Key to Protection
The governments of the USA, Japan, and South Korea have called on companies and individuals to remain vigilant and work together to create effective defense mechanisms. Thorough employee screening and adherence to security recommendations could help mitigate the risks of cyberattacks and safeguard the global financial ecosystem.

#CyberSecurity , #CryptoNewss , #cryptohacks , #cyberattacks , #HackerNews

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

Jake Gallen, CEO of the NFT platform Emblem Vault, lost more than $100,000 in crypto assets after what seemed like a harmless Zoom call turned into a nightmare. What started as a routine business meeting turned out to be a sophisticated hacking operation orchestrated by a cybercriminal group known as "Elusive Comet."

Zoom: A Backdoor for Malware
On April 11, Gallen shared on social media platform X that his system had been fully compromised, resulting in the loss of various cryptocurrencies, including Bitcoin and Ethereum, from multiple wallets.
He later revealed that the breach happened during a Zoom video call, which he had agreed to after being contacted by a verified X account with 26,000 followers claiming to be the CEO of a crypto mining platform.
During the call, Gallen had his camera on while the other participant remained hidden. It was during this meeting that malicious software called GOOPDATE was installed on his computer, allowing the attackers to steal his credentials and gain access to his wallets.

Elusive Comet — A Stealth Threat with a Professional Façade
Following the incident, Gallen began working with cybersecurity firm The Security Alliance (SEAL) to investigate the attack. According to their research, Elusive Comet operates under the disguise of a legitimate VC firm called Aureon Capital, which in reality serves as a front for targeted crypto theft.
SEAL warns that the group uses advanced social engineering tactics to manipulate victims into installing malware or granting system access unknowingly.

Zoom's Dangerous Default Setting
One of the key factors in the attack was Zoom’s remote access feature, which is enabled by default. This means that unless users manually disable it, anyone in the meeting can request access to their system.
Well-known NFT collector Leonidas also raised concerns, urging people in the crypto industry to immediately turn off this setting.
Security researcher Samczsun added that although remote access still requires user approval, attackers often manipulate victims into granting it through deceptive methods.

Hackers Breached Ledger Wallet and X Account
According to Gallen, the hackers even managed to gain access to his Ledger hardware wallet, despite the fact that he had only logged into it a few times in three years and had never stored credentials digitally. They also breached his X account and used it to lure additional victims via private messages.
SEAL reports that Elusive Comet has already stolen millions of dollars, using a carefully built network of fake identities and trustworthy-looking brands.

What You Can Do
SEAL urges anyone who has interacted with the alleged Aureon Capital to reach out to their emergency security team via Telegram. Key recommendations include:

🔹 Never grant device access during video calls.

🔹 Disable Zoom’s default remote access permissions.

🔹 Be extremely cautious, even when contacted by “verified” accounts.
The crypto space is becoming increasingly dangerous, and modern attacks are more sophisticated than ever. In a world where a single click can cost you everything, vigilance is the most valuable currency.

#CryptoSecurity , #CyberSecurity , #cryptohacks , #CryptoNewss , #bitcoin

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“