Курс MetaPhonePHONE

Crypto users are once again targeted. This time, Kaspersky has uncovered a new malware campaign that infiltrates through a fake Microsoft Office plugin on SourceForge. While people are usually suspicious of suspicious links or pirated applications, now even plugins that look legitimate can be a trap. The method is quite neat. This plugin disguises itself as a Microsoft Office add-in that seems to help productivity. But when installed, it infiltrates malware using the “clipboard hijacking” technique. So when users copy a crypto wallet address, the address is automatically replaced with the attacker’s. The end result? Funds are immediately sent to a wallet that is not intended. And all this happens without being noticed. Cybersecurity company Kaspersky: A malware disguised as a Microsoft Office plugin on SourceForge is targeting crypto users, employing a dangerous clipboard hijacking technique. This malware replaces the cryptocurrency wallet address copied by the user with the attacker's address,… — Wu Blockchain (@WuBlockchain) April 9, 2025 If you think this only happens on one platform, unfortunately not. At almost the same time, nine Visual Studio Code (VSCode) extensions were also found spreading cryptominer malware. The extensions were uploaded to the Microsoft Marketplace between April 4 and 7, 2025. Disguised as traditional development tools, the extensions secretly infect users with XMRig to mine Ethereum and Monero. Total downloads? More than 300,000 times. Roughly speaking, it’s like you downloaded an extension to help you with your work, but it turns out your CPU is being sucked up to mine crypto for other people. Not only does it waste electricity, it also makes your laptop slow and your hardware’s lifespan decreases faster. On the other hand, CNF previously reported that the Crocodilus malware was also detected, targeting Android devices, especially in Spain and Turkey. This Trojan uses an overlay technique to trick users into providing their crypto wallet recovery phrases. Once the victim grants access, Crocodilus can take full control of the device through the Accessibility Service permission. It’s like giving your house key and ATM password at one time—just because the application looks ordinary. Still not enough? Last February, a report from Kaspersky also mentioned the emergence of malware called SparkCat . This malware infiltrates Android and iOS devices through an application that looks harmless. SparkCat is able to steal important details directly from the victim’s phone through a very neat and difficult to detect data collection method. Furthermore, in November 2024, researchers from Microsoft Incident Response discovered a new remote access trojan (RAT) called StilachiRAT. This malware targets Google Chrome and can scan up to 20 cryptocurrency wallet addons. Following that, it extracts and decrypts the credentials included within them. Simply put, all of your crypto assets that are “safe” in the browser may have been spied on and are now ready to be stolen. This does not mean that all technology or plugins are dangerous. However, it is now clear that many threats come from unexpected places. Fake plugins, malicious extensions, mobile applications that look ordinary, to browser extensions that have been considered safe—all can be entry points for perpetrators. Maybe it’s time for us to change our perspective. Not only be careful of phishing or suspicious emails, but also of things that look normal.

Found out the issue. For anyone using tradesyncer and you trade from your phone like I do, make sure you keep your phone sideways when in the cockpit, and not upright. You’ll see what I mean if you do…

Law firm Greenberg Glusker shared on March 20 that it had obtained a $33 million arbitration award against T-Mobile, calling the result a critical milestone in holding telecom carriers accountable for SIM swap-related cryptocurrency theft. The Los Angeles arbitration took place in Fall 2023 and involved 12 days of testimony. According to Greenberg Glusker, the arbitration panel found T-Mobile liable for “its numerous security failures that enabled a SIM swap attack leading to the theft of cryptocurrency.” The final amount, which T-Mobile paid in full, also included more than $6.5 million in attorneys’ fees, interest, and costs. Greenberg Glusker has filed a petition in Los Angeles Superior Court to confirm the award and bring public attention to the details of the case. The law firm highlighted both the size and significance of the result. Greenberg Glusker attorney Pierce O’Donnell, who led cross-examinations during the arbitration, stated: This is the largest known SIM swap-related award on record and a significant victory for cell phone consumers. The firm emphasized that its litigation team—comprised of O’Donnell, Paul Blechner, James Molen, and Eric Sefton—demonstrated how T-Mobile had long failed to address known vulnerabilities. Blechner, who examined key witnesses including the attacker responsible for the SIM swap, stated: “This was a great result for our client, and for phone users everywhere. SIM swapping has been an unchecked security flaw for years. Carriers like T-Mobile have known about it and failed to take basic precautions. This award makes it clear: they must do better.” Molen added that the evidence contradicted T-Mobile’s repeated attempts to disclaim responsibility: “T-Mobile tried every argument to avoid responsibility, but the facts told a different story—T-Mobile failed to take the reasonable steps necessary to fix its porous security system and to protect its vulnerable customers.” Despite the outcome, Greenberg Glusker reported that T-Mobile is now attempting to prevent public access to the arbitration findings. Molen, speaking on behalf of the firm, criticized the effort: While the $33 million award is now public, T-Mobile has moved to seal the arbitrator’s findings, blocking access to details of its security failures. The law firm said it believes consumers have a right to know about the risks these security gaps present. Blechner, also representing Greenberg Glusker, detailed how SIM swaps can occur: “When the unauthorized SIM swap occurs, your phone is shut off from the network. During this period, the carriers are redirecting your calls and texts to a phone controlled by the bad actor.” 免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。

Hackers claim they breached crypto exchanges Gemini and Binance, exposing personal information from over 100,000 users of each platform. The data – allegedly including names, emails, and phone numbers – is reportedly up for sale on the dark web, according to cybersecurity researchers at The Dark Web Informer . These unconfirmed claims heighten concerns about cybercrime risks and potential scams targeting cryptocurrency users. The Dark Web Informer’s report details claims from a hacker using the alias “AKM69.” This individual allegedly stole and is selling a database containing records for around 100,000 Gemini users. The affected users are reportedly primarily in the United States, though some records are linked to Singapore and the UK. Sensitive information allegedly includes full names, email addresses, phone numbers, and location details. The source of this potential breach remains unconfirmed. Gemini has not commented publicly on the matter, and it’s unclear whether the issue, if confirmed, stems from an internal network compromise or external factors like widespread phishing or malware on user devices. Following the Gemini report, a separate hacker identified as “kiki88888” reportedly offered over 132,000 records for sale, claiming they contain Binance user data including emails and passwords. The authenticity and origin of this claimed Binance data are also unconfirmed. The Dark Web Informer suggests compromised user devices are one possible vector if the data proves legitimate. Binance has faced similar, unverified claims before; last September, the exchange investigated and denied a hacker’s claim of accessing 12 million user records. Related: Pump.fun Eyes Own AMM, Thwarts Bybit Hacker’s Laundering Attempt The data allegedly stolen from users of both exchanges is reportedly being marketed on dark web forums for various malicious purposes. Common uses include targeted scams, financial fraud, identity theft, and sophisticated phishing attacks designed to steal more credentials or funds. The Dark Web Informer recently noted a broader trend of device compromises globally, with cybercriminals actively exploiting stolen personal and corporate data to execute scams, such as phishing emails or messages carefully spoofing legitimate crypto platforms. These alleged Gemini and Binance incidents align with a wider pattern of cyber threats facing the crypto industry and its users. Australian authorities, for example, issued a warning on March 21 about scam messages specifically targeting users of various crypto exchanges. These scams often use spoofed sender IDs from exchanges like Binance to trick recipients into revealing login credentials or transferring funds to fraudulent wallets. Similar phishing campaigns had also targeted Coinbase and Gemini users in mid-March, reportedly deceiving some individuals into sending cryptocurrency to attacker-controlled addresses, resulting in the permanent loss of their funds. Users should remain vigilant against unsolicited messages asking for sensitive information or requesting fund transfers. Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

Excuse the phone update. Still in New Zealand atm. Reminder that its not Trump, not the fed and nothing about narratives. This has been the cycle for a long time now. This 3 week closes on SPX today and will be the confirmation on cycle trend shift.