Smart contracts get drained more than ten ways — reentrancy, front-running, governance takeovers, and signature replay all have entire…

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

A case study in trust-boundary failure, Sybil positioning, and the limits of “code is law” — written for a security/pen testing audience…

At a Glance Field Detail Malware family CrashStealer (native C++ macOS infostealer) Threat actor Unattributed; part of a larger multi-platform operation Targets macOS users, especially cryptocurre…

Securing Crypto Wallet Architecture

At a Glance Malware family OkoBot framework (TookPS lineage; 20+ payloads and implants) Threat actor Unattributed; suspected Russian-speaking operator Targets Hundreds of victims in 25+ countries,…

At a glance Actor / group UAT-11795 (suspected Russian-speaking, financially motivated) Activity type Credential and cryptocurrency theft via trojanized software installers Targets / victims Windo…

Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical security tips. for confident use.

The Inversion of State-Sponsored Cyber Heists For years, state-sponsored North Korean cyber operatives conducted audacious digital heists across international borders to siphon foreign currency an…

At a glance Threat actor Famous Chollima, also called Wagemole; North Korea-aligned Activity type Social engineering via fake job interviews; ClickFix lures delivering RATs Targets Crypto and Web3…