⚠ JUST IN: Pornographic video games are being used to spread malware.

AnhLab (South Korean Cybersecurity company) discovered malware in a real pornographic video game after a victim reported losing 1.2 BTC (~$120k). The company warns users the game was designed to be real and to steal sensitive information and financial data.

@Beware

⚠ UPDATE: A copycat attacker minted 11M $TRU minutes after the main Truebit hack, dumping them for 80 ETH (~$251K).

The timing suggests the attacker was already aware of the vulnerability, as the wallet was funded from Tornado Cash three days prior to the compromise.

@Beware

⚠ JUST IN: Crypto scam victims are now attempting to flirt with female callers.

Last week, we shared a clip featuring the infamous caller Tiffany scamming a victim. Since then, reports claim that nearly everyone she calls now responds by flirting and asking inappropriate questions, effectively turning the tables on her.

@Beware

⚠ JUST IN: North Korean hackers are hiding malware in fake job interviews

DPRK hackers are targeting developers on LinkedIn, posing as recruiters and sending fake job interviews with GitHub coding tasks. Developers who open these files have malware installed that steals sensitive data, including crypto wallets. In one case, a victim lost $80k after responding to a recruiting message.

@Beware

⚠ UPDATE: The exploiter has deposited the stolen funds into Tornado Cash

A total of 8,535 ETH worth around ~$26.5M was deposited into Tornado Cash after an exploit targeted a 5 year old contract, effectively laundering the funds and making them lost forever.

@Beware

🚨 UPDATE: Instagram fixed an API issue that allowed password reset email abuse and confirmed no breach occurred.

As Instagram users were hit with password reset spam, a previously unknown data leak from 2022 began circulating widely. As it became freely available to the public for the first time, many on social media assumed the two events were connected.

@Beware

🚨 JUST IN: Over 324k BreachForums users were exposed in a database breach yesterday.

The leak comes from the same BreachForums once operated by Pompompurin before authorities seized it in 2023. A rival hacking group, ShinyHunters, is reportedly behind the breach and has been flaunting the stolen data across their community and site.

@Beware

🚨 JUST IN: Dubai has banned and restricted privacy coins, including Monero (XMR) and Zcash (ZEC) starting January 12.

Dubai states only stablecoins backed by real fiat currency and liquid reserves are permitted. Coins that depend on algorithms instead of real backing are not allowed.

@Beware

❄️ JUST IN: Tether has frozen more than $182M in USDT for an undisclosed reason.

Over the weekend, Tether froze $182M across five Tron wallets, bringing the total frozen since 2023 to $3.3B and 7,268 wallets. We suggest using decentralized coins such as DAI to truly own your assets.

@Beware

⚠ JUST IN: Former New York City mayor rugpulled $3.4M following the launch of his “NYC” memecoin.

Eric Adams, the former NYC mayor launched the $NYC memecoin and promoted it across news outlets and social media as the city’s official token. Just 30 minutes later, he drained its liquidity which caused over $3.4M in investor losses.

@Beware

🚨 JUST IN: Coinbase callslave @nuke / @stat was snaked out of $300k by a catfish egirl.

The Coinbase caller known as @nuke was ratted out of $300k after months of being catfished by his Roblox egirl. He was entirely consumed by egirls, so much so he turned to fraud to keep paying for camshows. His obsession ultimately ended when malware was hidden inside a Minecraft mod which his egirl was paid to carry out.

@Beware

⚠ JUST IN: Yield Protocol has lost over $3.8M due to a swap error.

The YoVault operator swapped ~$3.84M stkGHO for just ~$112K USDC due to a misconfigured Uniswap v4. The protocol team paused Pendle and bought $3.71M GHO to restore the vault.

@Beware