5 posts

Scam

The Ledger CryptoBilis supply-chain attack: what the hidden implant means for your seed phrase.

The Ledger CryptoBilis supply-chain attack: what the hidden implant means for your seed phrase.

Louis Marquenet ―

At 04:59 UTC on 9 October, 30 TRON wallets quietly handed control to a new key. Their owners had not touched them. Eight minutes later, the money started moving, and within an hour the attacker had emptied wallets on six blockchains. Bitquery's on-chain investigation counts $93.2 million taken from 315 wallets. The victims had one thing in common: they bought their Ledger hardware wallets from

1password credentials infostealers News north korea password manager Scam rekt
Diagram of an adversary-in-the-middle phishing attack: a user enters credentials on a fake website, which passes them to the attacker, who uses them on the real website

Anatomy of a LinkedIn Job Scam.

Carlos Finos ―

From the first message to the fake login page, a step by step look at how scammers turn career aspirations into phishing attacks. An InMail offering a BlackRock advisory seat. An InMail arrived on LinkedIn at 1:03 PM offering a Strategic Advisor seat on BlackRock’s Executive Committee. Four to six hours a month. An annual retainer between $190,000 and $275,000. The sender introduced herself as a

News opsec Scam rekt social engineering 1password
Trezor Brevo breach blog cover — fake 'Critical Security Alert: STM32 Entropy Bug' phishing email that passed SPF, DKIM, and DMARC

Trezor: 347,000 Users Phished After Attackers Breached Its Email Provider.

Carlos Finos ―

On September 9th, attackers compromised Brevo (the email platform behind Trezor's newsletter) and sent a fake security alert to roughly 347,000 subscribers. Trezor wasn't the only one hit: BitBox and CoinTracking got caught in the same net. The email looked legitimate to subscribers. It came from the official help@trezor.io address, with headers referring to mailing.trezor.io, and it passed standard SPF, DKIM,

News opsec password manager rekt Scam social engineering 1password infostealers
Signal Secure Backups: how to set them up and where to store the recovery key

Signal Secure Backups: how to set them up and where to store the recovery key

Carlos Finos ―

Signal used to have one hard rule: your messages lived on your device and nowhere else. Lose the phone, lose the history. That changed. Signal Secure Backups are now live on Android and iOS. They are end-to-end encrypted, opt-in, and Signal cannot read them. If your Signal threads touch treasury approvals, deployment coordination or incident response, this is worth ten minutes of your attention. Setup takes five.

News Scam rekt 1password
Not your seed = not your keys, a new ongoing attack where you could lose everything

Not your seed = not your keys, a new ongoing attack where you could lose everything

Security Researcher ―

A new and dangerously convincing phishing campaign is targeting cryptocurrency users across platforms like Coinbase, Gemini, and Trust Wallet. This time, it’s not asking for your recovery phrase, it’s giving you one. 🚩 "Use This Seed Phrase to Secure Your Account" • Have you been texted or emailed about your Coinbase account? • Did you call the number and transfer funds to secure them? • Did you use a seed

Scam

Stay in the loop

Subscribe to get the latest updates, straight to your inbox.