Skip to main content
← All Articles

Tag

#Cryptocurrency

35 articles

Advertisement

HIGH
Data Breach

Cronos Blockchain Halted After $6M Tectonic DeFi Exploit

A price manipulation attack on Tectonic’s TONIC token led to a $6M Ethereum theft from the Cronos blockchain, forcing an emergency network restart.

Runtime Rebel Intel
4 min read · Sep 1, 2026
HIGH
Data Breach

SafePal Data Breach Exposes 39,798 Customer Order Details

SafePal confirms a data breach impacting 39,798 customers, exposing names, emails, and shipping info. Stolen data is for sale, increasing phishing risks.

Runtime Rebel Intel
5 min read · Aug 17, 2026
ClickFix Attacks Deliver macOS Stealer Targeting Crypto
MEDIUM
Malware

ClickFix Attacks Deliver macOS Stealer Targeting Crypto

ClickFix social engineering campaigns target macOS users with Go-based infostealers designed to drain cryptocurrency wallets and credentials.

Runtime Rebel Intel
3 min read · Aug 10, 2026
HIGH
Threat Intel

Banking Malware, Crypto Clippers Hijack H1 2026 Payments

Gen Threat Labs details two H1 2026 campaigns: banking malware abusing compromised mailboxes and a Rust crypto clipper hijacking wallet addresses.

Runtime Rebel Intel
5 min read · Aug 9, 2026
HIGH
Malware

ClickFix Attack Deploys macOS Infostealer for Crypto Theft

The ClickFix attack leverages a Go-based macOS infostealer to pilfer cryptocurrency, browser data, and Apple Keychain credentials via a Bash script loader.

Runtime Rebel Intel
5 min read · Aug 7, 2026
Adform Script Poisoning: Crypto Wallet Swapping Attack
MEDIUM
Supply Chain

Adform Script Poisoning: Crypto Wallet Swapping Attack

Adform's JavaScript was poisoned to swap crypto wallet addresses on customer sites.

Runtime Rebel Intel
3 min read · Aug 1, 2026

Advertisement

DPRK-Linked macOS Malvertising Uses Fake Updates for Crypto Theft
HIGH
Threat Intel

DPRK-Linked macOS Malvertising Uses Fake Updates for Crypto Theft

North Korean threat actors are using deceptive full-screen macOS update pages to distribute crypto-stealing malware in a new Contagious Interview campaign.

Runtime Rebel Intel
3 min read · Jul 30, 2026
OkoBot Framework Injects Phishing Modules into Ledger and Trezor Apps
HIGH
Malware

OkoBot Framework Injects Phishing Modules into Ledger and Trezor Apps

The OkoBot malware framework targets Windows users to steal hardware wallet seed phrases by injecting malicious pages directly into legitimate desktop apps.

Runtime Rebel Intel
4 min read · Jul 15, 2026
Injective Labs npm Package Compromise Steals Crypto Keys
HIGH
Supply Chain

Injective Labs npm Package Compromise Steals Crypto Keys

Critical supply chain attack compromises Injective Labs SDK on GitHub, distributing malicious npm package `@injectivelabs/sdk-ts@1.20.21` to steal crypto wallet keys.

Runtime Rebel Intel
4 min read · Jul 10, 2026
HIGH
Supply Chain

Injective SDK npm Compromise: Crypto Wallet Stealer Detected

A malicious version of the Injective SDK (injective-js) on npm was published via a GitHub compromise, deploying a crypto wallet stealer. Developers are at risk.

Runtime Rebel Intel
4 min read · Jul 10, 2026
HIGH
Threat Intel

Metamask Phishing Campaign Targets Secret Recovery Phrases

Threat actors are targeting Metamask users with phishing emails designed to harvest Secret Recovery Phrases, leading to the total loss of cryptocurrency assets.

Runtime Rebel Intel
4 min read · Jul 1, 2026
Silent Swap Crypto Clipper: Fake Google Notes Ext Steals Wallets
MEDIUM
Malware

Silent Swap Crypto Clipper: Fake Google Notes Ext Steals Wallets

Analysis of Silent Swap crypto clipper campaign using a fake Google Notes extension to surreptitiously replace cryptocurrency wallet addresses during transactions.

Runtime Rebel Intel
5 min read · Jun 30, 2026
CRITICAL
Vulnerabilities

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

A critical vulnerability in SimpleHelp is actively exploited to deploy malware, targeting credentials, SSH keys, and crypto wallets. Immediate patching is essential.

Runtime Rebel Intel
4 min read · Jun 30, 2026
HIGH
Vulnerabilities

Zcash Orchard Pool Logic Error Enables Infinite ZEC Minting

A critical vulnerability in the Zcash Orchard privacy pool allowed attackers to bypass validation and counterfeit ZEC via zero-knowledge proof flaws.

Runtime Rebel Intel
4 min read · Jun 8, 2026
INFO
Threat Intel

OFAC Sanctions Nobitex: Disrupting Ransomware & Terror Finance

The U.S. Treasury sanctions Nobitex, Iran's largest crypto exchange, for facilitating terrorist financing and ransomware payments.

Runtime Rebel Intel
4 min read · Jun 3, 2026
JINX-0164 Targets Crypto Firms with macOS Malware and Fake Lures
HIGH
Threat Intel

JINX-0164 Targets Crypto Firms with macOS Malware and Fake Lures

The JINX-0164 threat actor targets cryptocurrency firms via recruitment-themed social engineering, macOS-specific malware, and CI/CD infrastructure exploits.

Runtime Rebel Intel
4 min read · May 28, 2026
HIGH
Threat Intel

FBI Warns: $388M Lost to Crypto ATM Scams in 2023 – Defense Guide

The FBI reports Americans lost over $388 million to crypto ATM scams in 2023, driven by social engineering. Learn how to protect against these financial frauds.

Runtime Rebel Intel
4 min read · May 19, 2026
BlueNoroff Exploits Fake Zoom Meetings to Deploy macOS Malware
HIGH
Threat Intel

BlueNoroff Exploits Fake Zoom Meetings to Deploy macOS Malware

BlueNoroff leverages AI avatars and stolen video to compromise crypto executives via fake Zoom calls and the Hidden Risk macOS malware family.

Runtime Rebel Intel
4 min read · Apr 29, 2026
26 FakeWallet Apps Infiltrate Apple App Store - Research Analysis
HIGH
Malware

26 FakeWallet Apps Infiltrate Apple App Store - Research Analysis

Researchers discover 26 malicious apps on the Apple App Store impersonating crypto wallets to steal seed phrases via trojanized software and browser redirects.

Runtime Rebel Intel
4 min read · Apr 24, 2026
HIGH
Malware

Malicious Crypto Apps on Apple App Store Target Private Keys

Dozens of fake cryptocurrency wallet applications have been found in the Apple App Store, designed to phish users' recovery phrases and private keys, leading to…

Runtime Rebel Intel
5 min read · Apr 21, 2026
HIGH
Malware

Malicious Crypto Wallets Infiltrate China's Apple App Store

26 fake cryptocurrency wallet apps infiltrated China's Apple App Store, impersonating popular brands to steal seed phrases and drain user funds.

Runtime Rebel Intel
4 min read · Apr 21, 2026
Grinex Exchange Shuts Down After $13.74M State-Sponsored Hack
MEDIUM
Threat Intel

Grinex Exchange Shuts Down After $13.74M State-Sponsored Hack

Sanctioned exchange Grinex halts operations following a $13.74M hack attributed to Western intelligence agencies. Analysis of TTPs and geopolitical impact.

Runtime Rebel Intel
4 min read · Apr 18, 2026
HIGH
Threat Intel

Grinex Crypto Exchange Suffers $13.7M Hack, Blames Intelligence

Kyrgyzstan's Grinex crypto exchange suspended operations after a $13.7M hack. The exchange attributes the breach to Western intelligence agencies, highlighting sector…

Runtime Rebel Intel
4 min read · Apr 18, 2026
REF6598 Exploits Obsidian Plugins to Deploy PHANTOMPULSE RAT
MEDIUM
Threat Intel

REF6598 Exploits Obsidian Plugins to Deploy PHANTOMPULSE RAT

Attackers are targeting finance and crypto sectors by abusing Obsidian plugins to deliver the PHANTOMPULSE RAT via sophisticated social engineering.

Runtime Rebel Intel
4 min read · Apr 16, 2026