⚠ JUST IN: North Korean hackers are hiding malware in fake job interviews

DPRK hackers are targeting developers on LinkedIn, posing as recruiters and sending fake job interviews with GitHub coding tasks. Developers who open these files have malware installed that steals sensitive data, including crypto wallets. In one case, a victim lost $80k after responding to a recruiting message.

@Beware

⚠ UPDATE: The exploiter has deposited the stolen funds into Tornado Cash

A total of 8,535 ETH worth around ~$26.5M was deposited into Tornado Cash after an exploit targeted a 5 year old contract, effectively laundering the funds and making them lost forever.

@Beware

🚨 UPDATE: Instagram fixed an API issue that allowed password reset email abuse and confirmed no breach occurred.

As Instagram users were hit with password reset spam, a previously unknown data leak from 2022 began circulating widely. As it became freely available to the public for the first time, many on social media assumed the two events were connected.

@Beware

🚨 JUST IN: Over 324k BreachForums users were exposed in a database breach yesterday.

The leak comes from the same BreachForums once operated by Pompompurin before authorities seized it in 2023. A rival hacking group, ShinyHunters, is reportedly behind the breach and has been flaunting the stolen data across their community and site.

@Beware

🚨 JUST IN: Dubai has banned and restricted privacy coins, including Monero (XMR) and Zcash (ZEC) starting January 12.

Dubai states only stablecoins backed by real fiat currency and liquid reserves are permitted. Coins that depend on algorithms instead of real backing are not allowed.

@Beware

❄️ JUST IN: Tether has frozen more than $182M in USDT for an undisclosed reason.

Over the weekend, Tether froze $182M across five Tron wallets, bringing the total frozen since 2023 to $3.3B and 7,268 wallets. We suggest using decentralized coins such as DAI to truly own your assets.

@Beware

⚠ JUST IN: Former New York City mayor rugpulled $3.4M following the launch of his “NYC” memecoin.

Eric Adams, the former NYC mayor launched the $NYC memecoin and promoted it across news outlets and social media as the city’s official token. Just 30 minutes later, he drained its liquidity which caused over $3.4M in investor losses.

@Beware

🚨 JUST IN: Coinbase callslave @nuke / @stat was snaked out of $300k by a catfish egirl.

The Coinbase caller known as @nuke was ratted out of $300k after months of being catfished by his Roblox egirl. He was entirely consumed by egirls, so much so he turned to fraud to keep paying for camshows. His obsession ultimately ended when malware was hidden inside a Minecraft mod which his egirl was paid to carry out.

@Beware

⚠ JUST IN: Yield Protocol has lost over $3.8M due to a swap error.

The YoVault operator swapped ~$3.84M stkGHO for just ~$112K USDC due to a misconfigured Uniswap v4. The protocol team paused Pendle and bought $3.71M GHO to restore the vault.

@Beware

🚨 JUST IN: Coinbase CEO Brian Armstrong says Coinbase can't support US Senate crypto bill

Coinbase says it cannot support the current Senate Banking draft, arguing it would harm crypto by limiting innovation, weakening privacy, and favoring banks, and says it would rather see no bill than a bad one.

@Beware