234 records in this category

1. article XMR Monero Hits Fresh Highs as KYC AML Pressure Rises Privacy Coins Back in the Spotlight

   As compliance rules tighten across the crypto industry, privacy-focused assets are back on many investors’ radars. One of the biggest winners so far is Monero (XMR) — a cryptocurrency designed to make transactions harder to trace.
   

   Please Register !

   ‍

   Please Register !

   Please Register !

   Please Register !

   Monero hits a fresh all-time high
   On Tuesday, Monero surged past $687, setting a new record and gaining roughly 14% over 24 hours, based on TradingView market data.
   Over the last week, XMR is up about 45%, pushing it into roughly the 12 largest cryptocurrencies by market cap.
   

   Please Register !

   Please Register !

   Meanwhile, the wider “privacy coin” segment also strengthened:
   Total privacy-coin market cap: up around 3.5%
   

   Please Register !

   Trading volume: up about 32%
   

   Please Register !

   Please Register !

   What’s driving demand for privacy coins?
   Analysts largely point to stricter KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements. As more platforms collect identity details and monitor transactions, some users and investors seek assets that offer financial confidentiality.
   

   Please Register !

   Narek Gevorgyan (CoinStats CEO) previously explained that privacy coins have been outperforming partly because people are reacting to growing “surveillance” in the digital economy and increased scrutiny of crypto transfers.
   

   Please Register !

   Europe: privacy coins under pressure from 2027
   Another major tailwind is regulation in Europe. The European Union is preparing broader AML rules that would ban privacy coins and anonymous crypto accounts from 2027, meaning regulated service providers may be prohibited from handling coins such as Monero (XMR) and Zcash (ZEC).
   

   Please Register !

   Please Register !

   Please Register !

   Santiment warns: social hype may be running hot
   Even with the strong price move, not everyone thinks this is the perfect moment to jump in. Crypto analytics firm Santiment warned that anyone looking for a new entry point should be mindful of elevated social-media excitement around XMR.
   

   Please Register !

   This warning was shared in a Tuesday post on X:
   

   Please Register !

   Santiment’s chart also suggested that Monero’s development activity has been weakening since early January, while XMR’s share of social-media attention peaked on Sunday.
   

   Please Register !

   Please Register !

   Please Register !

   Zcash swings wildly too
   Monero’s closest privacy-coin competitor, Zcash (ZEC), has also been extremely volatile. ZEC reportedly jumped about 12x from a yearly low near $48 to roughly $744 on Nov. 7, 2025 — around a month after the major $19B crypto market crash in early October.
   

   Please Register !

   More recently, Zcash slid roughly 21% over the past week, with observers linking the drop to:
   slowing developer activity
   

   Please Register !

   a governance dispute between the Electric Coin Company (core dev team) and Bootstrap (a nonprofit supporting the protocol)
   

   Please Register !

   Please Register !

   Quick extra context (my add-on)
   Privacy coins often spike when regulation headlines get louder — but they can also pull back fast once hype cools. If you’re tracking XMR/ZEC, it helps to watch:
   regulatory deadlines and enforcement signals
   

   Please Register !

   developer activity + network usage (not just price)
   

   Please Register !

   sentiment indicators (when “everyone” talks about it, risk rises)
   

   Please Register !

   This is general market commentary, not financial advice.
    
   

   ---

   • 

   • By 100%

     • January 14

   0 comments

   5.3k views

   Read more...
2. article Apple Confirms Active iPhone Spyware Attacks Millions of UK Users Could Be at Risk

   Apple has issued a warning that some iPhones may be vulnerable to spyware-driven attacks — sparking fresh concerns about device surveillance and everyday privacy.
   

   Please Register !

   Please Register !

   
   Just before Christmas, the company pushed security fixes for two vulnerabilities that were already being actively exploited, aiming to reduce the immediate risk.

   Please Register !

   ‍

   Please Register !

   What “spyware” really means (and why it’s scarier than typical hacks)
   Spyware is high-end surveillance software, usually built by private firms — not random cybercriminals. Unlike common hacking tools, this kind of software is:
   
   

   Please Register !

   professionally engineered
   

   Please Register !

   expensive
   

   Please Register !

   designed for targeted, stealthy monitoring Once it gets in, it may be able to access things like:
   
   

   Please Register !

   messages and chats
   

   Please Register !

   emails
   

   Please Register !

   location data
   

   Please Register !

   photos
   

   Please Register !

   even microphone audio (often without the user noticing) Security experts warn that while these attacks often start with “high-value” targets, the techniques can spread quickly and be adapted for broader use.
   

   Please Register !

   Please Register !

   Which iPhone users are most exposed?
   According to information highlighted by Forbes, around 50% of eligible iPhone users may still be at risk because they haven’t updated to iOS 26. Tracking sources referenced in the same reporting (such as StatCounter and TelemetryDeck) suggest adoption could range anywhere from 20% to 60%, depending on how it’s measured.
   Another concern: for many older Apple devices, security fixes may no longer arrive unless users install the newest iOS version available to them — a shift away from Apple’s older security-update approach.
   External link from the original article (kept in the same spot):
   

   Please Register !

   Why some users avoid the latest iOS update
   There are a few common reasons people delay updates — and they’re not always “laziness”:
   
   

   Please Register !

   Liquid Glass design (mentioned by Forbes)
   It may look sleek, but some users feel it’s harder to navigate — especially if icons appear smaller or options are tucked into menus.
   

   Please Register !

   Performance worries
   People often fear a major iOS update might: slow down older iPhones
   drain battery faster
   introduce bugs or glitches
   Those concerns are understandable — but delaying security updates can leave the door open for advanced threats.
   

   Please Register !

   How to protect yourself (practical steps)
   Apple’s core recommendation is simple: update your device if you want reliable protection.
   If someone really doesn’t want to update right away, Forbes suggests an extra habit:
   
   

   Please Register !

   Power the phone off at least once per week — this can disrupt certain malware that only survives in temporary memory.
   However, more advanced spyware may persist even after rebooting, so this is not a complete solution. Also follow smart browsing and messaging hygiene:
   
   

   Please Register !

   avoid suspicious pop-ups
   

   Please Register !

   don’t click unknown links
   

   Please Register !

   don’t open unexpected attachments
   

   Please Register !

   be extra cautious with messages from unknown numbers or random email addresses

   Please Register !

   Extra tips (worth doing even if you update)
   Here are a few additional steps that genuinely improve safety:
   
   

   Please Register !

   Turn on automatic updates (iOS + app updates)
   

   Please Register !

   Use a strong passcode (not 4 digits if you can avoid it)
   

   Please Register !

   If you’re at higher risk (public figure, journalist, activist), consider Lockdown Mode
   

   Please Register !

   Keep secure backups, so you can recover fast if something goes wrong
   

   Please Register !

   Regularly review app permissions (location, microphone, photos)

   Please Register !

   Bottom line
   Experts emphasize that updating to iOS 26 is the only consistently reliable way to close off the exploited security holes described in the report. Waiting too long increases the chance that your iPhone could be hit by spyware designed specifically to stay hidden.
   

   Please Register !

   Please Register !

    
   

   ---

   • 

   • By 100%

     • January 14

   0 comments

   11k views

   Read more...
3. article Crypto Phishing Attacks How Scammers Steal Your Gold and How to Stop Them

   What is phishing in cryptocurrency?

   Please Register !

   
   Phishing is a crypto scam where criminals trick you into revealing private information—most commonly your seed phrase (recovery phrase), private keys, login details, or approval signatures. They often pretend to be a real exchange, wallet provider, or support agent to earn your trust. Once they get what they need, they can empty your wallet or take control of your accounts.
   Phishing has become more common as attackers get better at copying real brands and building convincing fake pages. Many scams specifically target wallet users, crypto exchanges, and token launches/airdrops—so knowing the patterns is essential.
   In this guide, you’ll learn how crypto phishing works, how to spot warning signs, and how to avoid getting trapped.
   How does a crypto phishing attack work?

   Please Register !

   
   A typical phishing attempt starts like this:
   A mass email, DM, or SMS is sent to many people.
   The message looks “official” (for example, it claims to be from an exchange or wallet).
   It includes a link that takes you to a fake website designed to look almost identical to the real one.
   You’re pushed to log in, “verify,” or “fix” something.
   If you type your credentials—or worse, your seed phrase—the attacker uses it to break into your account or drain your funds.
   

   Please Register !

   Scammers usually trigger action using fear or urgency, e.g.:
   “Your account will be locked in 1 hour!”
   “Suspicious activity detected—confirm now!”
   “Claim your airdrop reward before it expires!”
   Some also lure victims with a fake bounty, “exclusive reward,” or “limited-time airdrop.”
   How to recognize a phishing email or message

   Please Register !

   
   Phishing can be hard to spot—good scammers copy everything. Still, there are classic red flags:
   1) Copycat branding

   Please Register !

   
   Scammers often duplicate:
   logos, fonts, colors
   support-style wording
   layout that looks “close enough”
   

   Please Register !

   Best defense: know the usual look of the services you use, and bookmark the real sites.
   2) Spelling / grammar mistakes

   Please Register !

   
   Many phishing messages include odd phrasing, broken English, or strange formatting. Sometimes it’s rushed. Sometimes the scammer simply isn’t fluent.
   3) Misleading links

   Please Register !

   
   The link may look legit, but the destination is fake. Trick methods include:
   shortened URLs
   look-alike domains
   tiny character swaps (e.g., using “I” instead of “l”)
   Example patterns (watch closely):
   real-site.com → reaI-site.com exchange.com → exchànge.com wallet.com → wallet-security.com 4) Public email instead of a company domain

   Please Register !

   
   A “support” message from something like @gmail.com or @outlook.com (instead of a real corporate domain) is a major warning sign.
   5) Content mismatch

   Please Register !

   
   If the tone feels “off,” the buttons don’t match the message, or the email layout is inconsistent, treat it as suspicious.
   Example: the text says “Log in,” but the button says “Sign up.”
   Common crypto phishing methods (the ones you’ll see most)

   Please Register !

   
   

   Please Register !

   Spear phishing
   A targeted scam aimed at one person or company. The attacker uses personal details (name, role, workplace) to make the message feel real.
   

   Please Register !

   Whaling
   A spear-phishing variant aimed at high-profile targets (like CEOs or admins). If successful, it can expose an entire organization.
   

   Please Register !

   Clone phishing
   A scammer copies a legitimate email you’ve received before, then replaces the original link/attachment with a malicious one.
   

   Please Register !

   Pharming
   You type the correct URL, but still end up on a fake site—often due to DNS manipulation or infected systems. Dangerous because it looks “normal” at first glance.
   

   Please Register !

   Evil twin Wi-Fi
   Attackers create a fake public Wi-Fi network with a convincing name. When you connect, they can capture logins or push fake pages.
   

   Please Register !

   Vishing (voice phishing)
   Scams via phone calls/voicemail. Caller ID may be spoofed to look like a bank or exchange.
   

   Please Register !

   Smishing (SMS phishing)
   Text messages that imitate real companies and push you to click a link and log in.
   

   Please Register !

   DNS hijacking
   The attacker changes DNS entries so a legitimate website points to a fraudulent IP address, redirecting users to a fake clone.
   

   Please Register !

   Phishing bots
   Automated tools that mass-send scam messages, generate fake pages, and collect stolen credentials at scale.
   

   Please Register !

   Fake browser extensions
   Malicious add-ons that pretend to be useful tools but steal:
   seed phrases
   private keys
   keystore files
   They may also inject ads or redirect you to fake websites.
   

   Please Register !

   Ice phishing (signature/approval trap)
   One of the nastiest in crypto: you’re asked to “sign” something that looks harmless. In reality, you approve token access or transfer authority to the scammer.
   If you sign it, your tokens can be drained without another login.
   

   Please Register !

   Crypto-malware / ransomware
   Malware encrypts your files and demands payment to unlock them. Often delivered via fake attachments, scam sites, or malicious extensions.
   How to avoid crypto phishing (practical checklist)

   Please Register !

   Please Register !

   
   

   Please Register !

   Message safety
   Treat unexpected emails/DMs as suspicious—especially with links or attachments.
   If unsure, contact support using the official website, not the email you received.
   Never trust “urgent” threats or countdown timers.
   

   Please Register !

   Link & website safety
   Don’t click unknown links.
   Type the website address manually or use bookmarks.
   Double-check the domain letter by letter.
   

   Please Register !

   Account & device protection
   Use strong, unique passwords (a password manager helps).
   Enable 2FA (prefer authenticator apps over SMS where possible).
   Keep your OS, browser, and security tools updated.
   

   Please Register !

   Wallet rules you should never break
   Never share your seed phrase with anyone—ever.
   No legit support will ask for:
   seed phrase
   private key
   full login credentials
   

   Please Register !

   Extra tips (worth it)
   Use a reputable exchange and wallet.
   Avoid random browser extensions.
   Use a VPN on public Wi-Fi.
   For DeFi: be careful what you sign and what permissions you grant.
   If you think you got phished (do this fast)

   Please Register !

   
   Move funds to a new safe wallet (if you still can).
   Change passwords (email first, then exchange accounts).
   Revoke suspicious token approvals (important for DeFi users).
   Contact the exchange/wallet provider via official channels.
   Report the incident and keep evidence (screenshots, addresses, emails).
   

   ---

   • 

   • By 100%

     • January 26

   0 comments

   9.5k views

   Read more...
4. article Matcha Meta Hit via SwapNet Router Exploit on Base Leads to Up to $16.8M Drained

   Please Register !

   What happened?
   On Sunday, Matcha Meta (a DEX aggregator) reported a security incident that didn’t originate from Matcha’s own core systems, but from one of its key liquidity routes: SwapNet. The issue was tied to a smart-contract vulnerability involving SwapNet’s router contract, which attackers allegedly used to siphon user funds.
   Matcha Meta warned that anyone who had previously approved tokens for SwapNet’s router contract could still be exposed, and urged users to revoke those approvals immediately to limit further damage.
   

   Please Register !

   Why token approvals matter here
   In DeFi, token approvals (allowances) let a contract move your tokens without asking again each time. That’s convenient… until the contract (or a contract you approved) becomes vulnerable.
   In this case, the alert focused on “one-time approvals” and older allowances that might still exist. If the router had permission to spend your tokens, an attacker could potentially exploit that approval pathway.
   

   Please Register !

   Matcha Meta’s guidance: revoke all approvals granted to SwapNet’s router contract.
   

   Please Register !

   How much was stolen? Estimates differ
   Different security trackers reported different totals:
   CertiK estimated roughly $13.3M drained.
   PeckShield reported at least $16.8M stolen on Base.
   PeckShield also described on-chain movements that included swapping stablecoins into ETH and then moving funds across networks:
   

   Please Register !

   CertiK’s analysis pointed to an exploit pattern that allowed malicious actions through the SwapNet contract:
   

   Please Register !

   Please Register !

   Was Matcha Meta itself hacked?
   Matcha Meta stated that the risk exposure was connected to SwapNet, rather than a direct compromise of Matcha Meta’s own infrastructure.
   At the time of publication, Matcha Meta had not publicly confirmed details such as:
   the precise root cause of the vulnerability,
   whether affected users would be compensated,
   what additional safeguards would be implemented going forward.
   Here’s the original X post mentioned in the article (kept in the same spot as in the source):
   

   Please Register !

   Not an isolated case: recent exploits add up
   This incident landed shortly after another major smart-contract exploit. About two weeks earlier, an attack reportedly caused around $26M in losses for Truebit (an offline computation protocol), and the TRU token experienced a dramatic crash (around 99%), according to reporting dated Jan. 8.
   Related reading (title only): Bitcoin investor loses retirement fund in AI-fueled romance scam
   

   Please Register !

   Smart contracts remain the top target
   Security reporting continues to highlight smart contracts as the biggest bullseye for attackers:
   Smart-contract weaknesses reportedly accounted for 30.5% of crypto exploit losses in 2025, across 56 incidents (per SlowMist’s year-end summary).
   Account takeovers and hijacked X accounts were next, at roughly 24%.
   

   Please Register !

   AI is changing the exploit landscape
   Researchers also point out that modern AI tooling is speeding up how vulnerabilities are discovered. The article notes that in December, commercial generative AI agents reportedly identified about $4.6M worth of exploitable smart-contract issues in existing protocols, using models such as:
   Anthropic’s Claude Opus 4.5
   Claude Sonnet 4.5
   OpenAI’s GPT-5
   

   Please Register !

   Quick protection checklist (extra tips)
   If you use DeFi aggregators, routers, or DEX tools, this is the hygiene that saves wallets:
   

   Please Register !

   Audit your allowances regularly (especially for router/spender contracts).
   

   Please Register !

   Revoke approvals you don’t need (old approvals are silent risk).
   

   Please Register !

   Prefer limited approvals over “infinite” approvals when possible.
   

   Please Register !

   Keep a separate wallet for DeFi experimenting vs. long-term holdings.
   

   Please Register !

   Don’t sign transactions you don’t fully understand—especially “approval” and “permit” style signatures.
   

   Please Register !

   If a protocol posts a security alert, assume speed matters: revoke first, investigate after.
   

   ---

   • 

   • By 100%

     • January 26

   0 comments

   5.4k views

   Read more...
5. article 149 Million Stolen Logins Exposed What Crypto Users Should Do Next

   Please Register !

   What was discovered?
   A huge, publicly accessible database containing stolen usernames and passwords was recently spotted by cybersecurity researcher Jeremiah Fowler. The credentials appear to have been collected from infected personal devices (phones and computers) using infostealer malware—a type of malicious software that quietly grabs saved logins from browsers, apps, and sometimes password managers.
   According to a blog post published on ExpressVPN, the dataset reportedly held around 149 million credential pairs. Among them were logins tied to major platforms like Facebook, Instagram, Netflix, and also the crypto exchange Binance—including about 420,000 credentials associated with Binance users.
   

   Please Register !

   What’s inside the leak (high-level numbers)
   The dump reportedly included, among others:
   

   Please Register !

   48M Gmail accounts
   

   Please Register !

   4M Yahoo accounts
   

   Please Register !

   17M Facebook accounts
   

   Please Register !

   6.5M Instagram accounts
   

   Please Register !

   3.4M Netflix accounts
   

   Please Register !

   780K TikTok accounts
   

   Please Register !

   420K Binance-related credentials (at least)
   Fowler also noted that in the portion he reviewed, there were signs of compromised access affecting financial services, including trading accounts, banking, and potentially crypto wallet-related logins.
   

   Please Register !

   Please Register !

   Why government-related logins are especially worrying
   One of the more alarming parts of Fowler’s comments was the mention of credentials connected to government-linked accounts and .gov domains. That’s risky because it can fuel:
   

   Please Register !

   impersonation attempts (attackers pretending to be a government agency)
   

   Please Register !

   phishing campaigns aimed at citizens or employees
   

   Please Register !

   targeted attacks using “official-looking” emails
   

   Please Register !

   Important clarification: this is NOT proof Binance’s systems were hacked
   Security experts emphasized that this does not automatically mean Binance suffered an internal breach. The more likely scenario is:
   

   Please Register !

   Infostealer malware infected users’ devices →

   Please Register !

   stole saved credentials →

   Please Register !

   those logins ended up in a database dump.
   A Binance spokesperson reportedly explained that these are credentials stolen from compromised devices, not “leaked from Binance.”
   Deddy Lavid (CEO of blockchain cybersecurity firm Cyvers) also stressed the same point: it looks like an end-user device compromise, not an exchange back-end failure.
   

   Please Register !

   What Binance reportedly does in these cases
   The article notes that Binance works to reduce harm by:
   

   Please Register !

   monitoring dark-web marketplaces
   

   Please Register !

   warning affected users
   

   Please Register !

   forcing password resets when needed
   

   Please Register !

   revoking suspicious or compromised sessions
   Binance also recommends using antivirus / anti-malware tools and running regular scans to catch threats like infostealers early.
   

   Please Register !

   Infostealers targeting crypto via “game mods” (Kaspersky warning)
   The piece also references a warning from Kaspersky (December 2025) about a newer infostealer campaign that pretends to be game cheats or mods. It reportedly aims at:
   

   Please Register !

   crypto wallets
   

   Please Register !

   browser extensions (especially wallet extensions)
   

   Please Register !

   account sessions and saved passwords
   It was reportedly found in November, and attackers were said to hide it inside game cracks/mods, with frequent references to Roblox-themed bait.
   

   Please Register !

   What you should do right now (practical checklist)
   If you trade crypto or use wallet extensions, this is the “do it today” list:
   

   Please Register !

   1) Change passwords (start with email!)
   Change your email password first (because password resets go there).
   Then change exchange and social passwords.
   Use a unique password for each site (password manager helps a lot).
   

   Please Register !

   2) Turn on stronger 2FA
   

   Please Register !

   Prefer Authenticator app or hardware security key
   

   Please Register !

   Avoid relying only on SMS 2FA if you can
   

   Please Register !

   3) Clean your device
   Run a full malware scan
   Remove unknown browser extensions
   Update your OS and browser
   Windows (built-in Defender quick examples)
   # Update Defender signatures Update-MpSignature # Quick scan Start-MpScan -ScanType QuickScan # Full scan (takes longer) Start-MpScan -ScanType FullScan

   Please Register !

   4) If you use wallet extensions
   Remove suspicious extensions immediately
   Consider moving funds to a fresh wallet if you suspect compromise
   Treat any exposed seed phrase as burned (create a new wallet)
   

   Please Register !

   5) Watch for phishing after leaks
   After big dumps, attackers often launch follow-up scams:
   “Security alert: log in now”
   “Your account is at risk”
   “Verify your wallet”
   If a message pressures you with urgency, slow down—that’s the point.
   

   ---

   • 

   • By 100%

     • January 26

   0 comments

   5.4k views

   Read more...
6. article Locked Out of Crypto UK Banks Reportedly Block or Delay 40% of Transfers to Exchanges

   Please Register !

   What the survey says
   A fresh survey from the UK Cryptoasset Business Council (UKCBC) suggests that moving money between UK bank accounts and crypto exchanges has become increasingly difficult — even when customers are using regulated platforms.
   The report, titled “Locked Out: Debanking the UK’s Digital Asset Economy,” is based on feedback from 10 of the UK’s largest centralized exchanges. Together, these firms serve millions of UK users and have processed hundreds of billions of pounds in transaction volume. The idea behind the survey is simple: replace “everyone says it’s happening” with real numbers and show how bank controls are shaping the sector.
   UKCBC argues that these restrictions are doing more than annoying customers — they may be slowing growth, pushing activity overseas, and weakening the UK’s ambition to become a major digital assets hub.
   

   Please Register !

   “How hard is it to move money?”
   Based on the exchanges’ internal data, UKCBC estimates that around 40% of transactions to crypto exchanges are being blocked or delayed by certain banks.
   The survey also found:
   

   Please Register !

   8 out of 10 exchanges noticed an increase over the last 12 months in customers facing blocked or limited transfers
   

   Please Register !

   None of the exchanges reported a decrease
   Simon Jennings, executive director of UKCBC, acknowledged that fraud prevention is a real issue — but added that many in the industry worry banks are using “compliance posture” as a convenient reason to hold back the sector’s development.
   One UK-founded exchange reportedly saw close to £1 billion in declined UK transactions over the past year, driven by bank-side rejections of card payments and open-banking transfers.
   

   Please Register !

   A broad pattern across banks (not just one provider)
   The survey claims the trend affects a wide range of institutions:
   

   Please Register !

   Many high-street banks are said to enforce strict limits or outright blocks on:
   bank transfers to exchanges
   card payments to exchanges
   

   Please Register !

   Some challenger banks reportedly allow payments — but with tight caps or 30-day restrictions
   

   Please Register !

   Blanket rules + poor transparency
   UKCBC’s biggest complaint isn’t only the restrictions — it’s how they’re applied.
   According to the report:
   

   Please Register !

   Most major UK banks and payment providers are using blanket limits or total blocks
   

   Please Register !

   These controls often don’t clearly distinguish between:
   FCA-registered UK businesses
   higher-risk or unregulated platforms
   Exchanges also described the restrictions as inconsistent — including cases where controls hit FCA-registered firms, which they argue should be treated differently under a risk-based approach.
   

   Please Register !

   “We get blocked, but we don’t get told why”
   One of the sharpest points in the report: 100% of surveyed exchanges said banks provide no clear explanations for blocks or account restrictions — leaving both companies and customers guessing.
   And the impact on customers is real:
   

   Please Register !

   One exchange said 60% of customers expressed anger about the friction
   

   Please Register !

   Another called bank limits and bans the single biggest barrier to launching or scaling new crypto products in the UK
   

   Please Register !

   UKCBC’s recommendations
   UKCBC says this goes beyond inconvenience — and frames it as an anti-competitive “debanking” problem that could push innovation elsewhere.
   The report recommends:
   

   Please Register !

   Government and the FCA should clearly state that blanket bans are not acceptable
   

   Please Register !

   Banks should adopt more granular, evidence-based risk frameworks
   

   Please Register !

   FCA registration should carry meaningful weight, reducing unnecessary blocks and friction for registered UK firms
   Jennings said that constructive dialogue is the necessary first step — but claimed banks have so far not engaged meaningfully, and have been unwilling to share data on fraud levels. In his view, if the UK wants to compete globally, the current situation can’t remain the norm.
   

   Please Register !

   Extra practical notes (useful if you’re in the UK)
   If you’re a UK user trying to fund an exchange account, these steps often reduce headaches (without trying to “game the system”):
   

   Please Register !

   Keep your KYC up to date on the exchange
   

   Please Register !

   Use your own bank account only (avoid third-party transfers)
   

   Please Register !

   Split large deposits into smaller ones if your bank has strict caps
   

   Please Register !

   Save records of deposits/withdrawals in case your bank requests proof of source-of-funds
   

   Please Register !

   Enable strong security (2FA), because banks are especially cautious when fraud signals appear
   

   Please Register !

   If a transfer is blocked repeatedly, contact your bank and ask what policy triggered it (sometimes they’ll clarify the allowed rails/limits)
   

   ---

   • 

   • By 100%

     • January 26

   0 comments

   9.4k views

   Read more...
7. article Massive Crypto Breach Torg Grabber Targeting 728 Different Wallets

   A sophisticated new threat has hit the digital asset space. Known as Torg Grabber, this aggressive infostealer is currently on the hunt, specifically optimized to compromise 728 different crypto wallet extensions hidden within 850 browser add-ons. This isn't just a theory or a test; the malware is fully operational and actively draining accounts as we speak.
   The software is designed to snatch seed phrases, private keys, and session tokens. It moves this data through encrypted tunnels so quickly that most standard antivirus or endpoint security tools fail to flag it until the damage is already done. If you use a browser-based wallet for self-custody, you are directly in the crosshairs.
   Security analysts recently uncovered this campaign after monitoring a complex loading chain. Their investigation revealed over 300 unique samples developed over a three-month period. This is a professional Malware-as-a-Service (MaaS) operation, run by organized groups rather than solo hackers.
   The Stats: What’s Under Attack?
   Breadth of Attack: The malware scans 850 extensions, focusing on 728 specific crypto targets.
   Browser Support: It is compatible with 25 Chromium-based browsers and 8 versions of Firefox.
   The Decoy: It arrives as a fake Chrome update named GAPI_Update.exe (approx. 60 MB).
   The Deception: It displays a fake "Windows Security Update" bar that lasts for exactly 420 seconds to distract the user while the infection takes hold.
   Technical Sophistication: Stolen data is protected using ChaCha20 encryption and HMAC-SHA256 authentication, routed through Cloudflare to blend in with legitimate web traffic.
   

   Please Register !

   Inside the Attack: How Torg Grabber Operates
   The infection begins when a user downloads a "dropper" disguised as a system update. This 60 MB package (built with InnoSetup) is typically hosted on platforms like Dropbox. Once launched, it places three harmless-looking DLL files into the following directory to avoid suspicion:
   %LOCALAPPDATA%\Connector\
   While the user watches an animated ASCII progress bar—thinking their system is updating—the real payload is deployed in the background. The malware then generates a randomized executable name to hide within the Windows directory:
   

   Please Register !

   In observed cases, the malware has attempted to shut down Event Tracing for Windows (ETW) to blind security monitoring software. Once active, it doesn't just stop at crypto. Torg Grabber goes after:
   Discord, Telegram, and Steam credentials.
   VPN and FTP client data.
   Email accounts and password managers.
   The stolen information is either compressed into a ZIP file in the system's memory or sent out in small "chunks" to avoid triggering network alarms. By using Cloudflare endpoints and high-level encryption headers, the hackers have built a "production-grade" pipeline for stolen data
    
   The Business of Cybercrime
   The architecture of this malware suggests a highly organized Russian-linked ecosystem. The binaries contain various "operator tags" and IDs, allowing different criminals to "rent" the software and deploy their own custom malicious code once they have infected a victim.
   Experts have described the setup as a "poisoned Swiss watch"—it is incredibly precise, reliable, and deadly for anyone holding digital assets.
    
    
   Who is Most at Risk?
   The number 728 is significant because it covers nearly every browser wallet with a substantial user base. If you use MetaMask, Phantom, or similar "hot wallets" as browser extensions, you are the primary target.
   Software Wallet Users: If your seed phrase is stored in your browser, a text file, or a basic password manager, one infection means your funds are gone.
   Exchange Users: While the malware doesn't "hack" the exchange itself, it can steal session tokens. If you are logged into an exchange in your browser, the hackers could potentially hijack that active session to bypass login requirements.
   Hardware Wallet Users: You are generally safe, unless you have typed your recovery seed into your computer or stored a digital copy of it.
   The threat list is expected to grow. Torg Grabber follows the path blazed by older malware like Vidar or RedLine, but with a much more polished and industrial-strength infrastructure. In the world of crypto, your security is only as strong as your most recent habit—stay alert and keep your sensitive data offline.
   

   ---

   • 

   • By 100%

     • March 30

   0 comments

   8.3k views

   Read more...
8. article Operation Asterix Exposed How an AI Powered Phishing Syndicate Targeted 885,000 Crypto Holders

   Operation Asterix Exposed: How an AI-Powered Phishing Syndicate Targeted 885,000 Crypto Holders
   A massive cybercrime infrastructure dubbed Operation Asterix has been exposed by cybersecurity firm Rapid7. The campaign compiled a database of nearly 885,000 phone numbers across 54 countries to launch high-precision social engineering, voice-phishing (vishing), and counterfeit application deployments against cryptocurrency investors. Rather than relying on traditional broad-spectrum spam, the operation integrated automated account verification tools and generative AI coding assistants to systematically harvest private recovery seed phrases from high-value target accounts.
   

   Please Register !

   The Scale and Reach of Operation Asterix
   Threat intelligence analysts at Rapid7 discovered an exposed directory hosting command-and-control (C2) artifacts from the syndicate. Their investigation revealed an extensive target database containing 885,000 mobile numbers. The largest localized file comprised 316,002 German phone numbers, with supplementary directories covering targets in Hong Kong, Bulgaria, the United Kingdom, the United States, Canadian fintech services, and specialized lists of hardware wallet owners.
   

   Please Register !

   Precision Targeting and the 13.6% "Hit Rate"
   What sets Operation Asterix apart from typical phishing campaigns is its automated validation pipeline. Scammers avoided spraying messages blindly; instead, they processed leaked numbers through account-checking scripts to verify if they were linked to major crypto exchanges like Binance and Kraken.
   

   Please Register !

   An additional 5,576 accounts were confirmed as Binance users and queued for immediate attack. Recovered C2 logs also revealed malicious spoofed emails pretending to originate from Crypto.com. Once an exchange match was confirmed, scammers enriched the lead profile with personal victim data, enabling call handlers to execute convincingly detailed voice-phishing (vishing) calls.
   

   Please Register !

   AI Assistants & Telephony Infrastructure
   Rapid7 researchers Anna Sirokova and Jan Recinsky discovered that generative AI tools played a core role throughout the development of the campaign. Shell command histories and prompt logs indicated the operators used AI assistants like GitHub Copilot and Claude Code to rapidly build trojanized Electron applications, obfuscate payload scripts, and configure C2 servers.
   When certain AI platforms resisted code obfuscation requests, the attackers attempted to bypass safety guardrails by submitting custom jailbreak prompts to alternative models like Kimi. To manage their call networks, the operators deployed the open-source telephony framework Asterisk (which inspired the operation's codename).
    
   Python

   Please Register !

   Please Register !

   Counterfeit Wallet Apps: Spoofing Ledger, Trezor, and Exodus
   The ultimate goal of Operation Asterix was to trick victims into installing fake versions of popular wallet software. Through direct phone calls and phishing emails, targets were instructed to download malicious clones of Trezor Suite, Ledger Live, and Exodus.
   These fake apps were visual carbon copies of authentic software. When launched, they requested the user's 12- or 24-word recovery seed phrase under the guise of mandatory security checks or firmware updates. The moment a seed phrase was entered, it was transmitted to attacker-controlled Telegram bots, handing scammers full control of the victim's private key.
   

   Please Register !

   Industry Context: Social Engineering Dominates Crypto Losses
   Operation Asterix reflects a broader structural shift in Web3 cybercrime: attackers are increasingly exploiting human trust rather than protocol smart contracts. According to quarterly research by security firm Hacken Security, phishing and social engineering caused $306 million in losses out of the $482 million total lost across the crypto market in Q1.
   Recent high-profile security incidents highlight the scale of this problem:
   Trezor Data Leak (August): Trezor confirmed that personal contact information for ~14,000 customers was compromised due to a security breach at its logistics partner, ShipMonk.
   Ethereum Approval Exploit (July): A crypto investor lost nearly $1 million after inadvertently signing a malicious token approval transaction on Ethereum.
   Fake Microsoft Store App (November): A fake Ledger Live application uploaded to the official Microsoft Store stole $588,000 across 38 fraudulent transactions.
   Uniswap Google Ads Scam (May 25): On-chain analyst b-block on X issued an urgent warning after sponsored Google search ads impersonated the decentralized exchange Uniswap, stealing over $400,000 from unsuspecting users.
   Address Poisoning Warnings: Prominent Web3 figures, including Binance co-founder Changpeng Zhao (CZ), have repeatedly warned about address poisoning schemes after an investor lost $50 million in a single poisoning scam.
   

   Please Register !

   Actionable Defense Strategies for Investors
   To safeguard your digital assets against Operation Asterix and evolving vishing campaigns, follow these essential security rules:
   The Zero-Seed-Phrase Rule: Hardware wallet providers (Ledger, Trezor) will NEVER ask you to enter your recovery seed phrase into a computer or phone app. Recovery phrases must only be entered directly into the physical hardware device itself.
   Ignore Direct Phone Support: Crypto exchanges and wallet vendors do not place inbound support calls regarding account security. If anyone calls claiming suspicious wallet activity, hang up immediately.
   Verify App Source URLs: Download management software strictly from confirmed, bookmarked vendor websites. Avoid clicking top-sponsored search results or links in SMS messages.
   Audit Smart Contract Permissions: Frequently inspect and revoke active wallet approvals using tools like Revoke.cash.
   

   ---

   • 

   • By 100%

     • August 25

   0 comments

   7.1k views

   Read more...
9. article Hodler Digest 54,000 Wallet Records Leaked, CLARITY Act Odds Plummet to 10%, and Tether Secures Landmark KPMG Audit

   Hodler's Digest: 54,000 Wallet Records Leaked, CLARITY Act Odds Plummet to 10%, and Tether Secures Landmark KPMG Audit
   The cryptocurrency ecosystem faces a critical juncture as physical hardware wallet security is compromised alongside escalating regulatory friction in Washington. In this edition of Hodler’s Digest, we unpack fresh data breaches affecting tens of thousands of cold-storage users, analyze the legislative impasse surrounding the US CLARITY Act, and evaluate Tether’s long-awaited clean financial audit from KPMG.
   

   Please Register !

   Legislative Deadlock: CLARITY Act Chances Drop to 10%
   Confidence in federal crypto legislation has hit a new low. Institutional research desk Galaxy Digital abruptly slashed its projected odds of the CLARITY Act passing in 2026 down to just 10% — a drastic reversal from its bullish 75% probability assessment back in May.
   Alex Thorn, Head of Research at Galaxy, noted that Congress faces severe scheduling constraints. Upon reconvening on September 14, the Senate will have a mere 14 working session days remaining. Barring an immediate procedural motion to proceed, Thorn emphasized that the bill can only survive if it completely monopolizes the Senate calendar.
   

   Please Register !

   To rescue the stalled bill, high-stakes negotiations are taking place at the highest levels. US President Donald Trump and SEC Chair Paul Atkins are hosting a White House summit with executive leaders from Coinbase, Andreessen Horowitz (a16z), Ripple, Chainlink, the NYSE, and Nasdaq. Meanwhile, the CFTC’s newly established Innovation Advisory Committee is convening to address cross-regulatory oversight of digital assets, AI infrastructure, and decentralized prediction markets.
   

   Please Register !

   Supply Chain Breach Exposes 54,000 Hardware Wallet Users
   Cold storage security has suffered a major setback following dual supply-chain breaches impacting over 54,000 hardware wallet customers. Leading wallet manufacturer Trezor confirmed that approximately 14,000 users had their personal shipment data exposed due to a compromise at third-party logistics provider ShipMonk. Customers who received hardware orders in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal between May 10 and August 8 are now at extreme risk of targeted phishing and spear-phishing attacks.
   Simultaneously, wallet provider SafePal disclosed an unauthorized breach compromising order records for nearly 40,000 clients, exposing full customer names, residential addresses, and product order histories. SafePal security teams have since dismantled over 30 fraudulent domains and phishing portals linked to the leak.
   

   Please Register !

   AI Exploits & The Push for Defense Capabilities
   The severity of hardware wallet security is further amplified by AI-driven vulnerability discovery. Following the high-profile $116 million theft from Coldcard devices, security researchers using open-weight Chinese AI models identified thousands of zero-day code vulnerabilities during red-teaming exercises.
   In response, a coalition of major industry defenders — including Anchorage Digital, BitGo, Bitwise, Blockstream, Ledger, and Trezor — issued an open letter coordinated by the Bitcoin Policy Institute. The letter urges frontier AI research labs to grant open-source Bitcoin developers dedicated access to cutting-edge AI security models, warning that public safety guardrails currently prevent ethical developers from keeping pace with AI-equipped threat actors.
   Bash

   Please Register !

   Please Register !

   Jurisdictional War Over Prediction Markets: CFTC vs. State Regulators
   A battle over financial jurisdiction has erupted between federal commodities regulators and state authorities regarding prediction market platforms like Kalshi and Polymarket.
   The CFTC invoked emergency market powers to order Kalshi to ignore a New York State restraining order, arguing that the Commodity Exchange Act guarantees a uniform national derivatives market. CFTC Chair Michael Selig asserted that Congress never intended exchange operators to navigate a fragmented "patchwork of state gambling laws." However, a Washington State judge countered federal preemption arguments, ordering Kalshi to cease regional operations and implement strict multi-source geofencing by September 2. Concurrently, the NYC Council has launched an inquiry into social media influencer promotions targeting young adults on prediction apps.
   

   Please Register !

   Ethereum Quantum Roadmap & Hegotá Hard Fork Scope
   The Ethereum Foundation has revised its post-quantum cryptography trajectory. Core researcher Justin Drake confirmed that the protocol will pivot away from the Poseidon hash function in favor of established standards such as SHA and BLAKE, citing breakthroughs that allow zero-knowledge SNARKs to work efficiently with legacy hashes.
   Ethereum developers target a production-ready leanVM by 2027, with full network deployment across consensus and execution layers scheduled for 2028. Meanwhile, developers are narrowing down 66 proposals for the upcoming Hegotá hard fork (following Glamsterdam), with the FOCIL censorship resistance proposal leading candidate selection.
   

   Please Register !

   Tether Secures Clean KPMG Financial Audit
   In a major milestone for stablecoin transparency, issuer Tether announced the completion of its first full independent financial audit, receiving an unreserved clean opinion from KPMG US for its 2025 financial records. Unlike quarterly attestations, this comprehensive audit independently verified Tether’s full balance sheet, confirming net reserves exceeding liabilities by $6.814 billion.
   

   Please Register !

   Weekly Market Overview: Winners, Losers & Expert Predictions
   Broad crypto market capitalization contracted to $2.16 trillion (per CoinMarketCap data). Bitcoin fell 3.3% to $62,842, Ethereum dropped 2.3% to $1,872, and XRP dipped 4.2% to $0.99.
   Category Asset Weekly Performance Top Gainers Velvet (VELVET) +131%   Ether.fi (ETHFI) +31%   Chainlink (LINK) +14% Top Losers Uniswap (UNI) -18%   Aptos (APT) -12%   Pepe (PEPE) -11% Expert Analyst Predictions & On-Chain Indicators:
   Cory Klippsten (Swan Bitcoin): Expects Bitcoin to hit a macro bottom around $53,000–$57,000 in October before climbing toward $130,000 ahead of the 2028 halving.
   Markus Thielen (10x Research): Dismissed $1 million Bitcoin forecasts by 2030 as "mathematically impossible," noting it would require $15 trillion in net inflows — roughly 25% of total US equity market value.
   Glassnode On-Chain Heatmap: Analyst Rafael Schultze-Kraft reported the longest post-FTX capitulation signal in Bitcoin's cycle position heatmap, though macro bottom confirmation remains pending. As noted by on-chain analysts on X (formerly Twitter), market sentiment remains heavily suppressed.
   

   Please Register !

   Additional Industry Briefs
   Kidnapping Plot Foiled: Federal prosecutors charged three Missouri men over an attempted Connecticut home invasion aimed at extorting a Bitcoin holder.
   El Salvador’s 5-Year Legal Tender Anniversary: While domestic adoption remains modest, the initiative vastly elevated El Salvador's sovereign financial profile.
   Counter-Intelligence Operation: Security researchers successfully ran a honeypot crypto startup to track rogue North Korean IT operatives.
   Solana Resource Fee Reform: Solana proposed dynamic fee updates to penalize high-compute operations and increase base SOL burn rates.
   

   ---

   • 

   • By 100%

     • August 25

   0 comments

   7.8k views

   Read more...