YouTube video by Crypto Cobra

https://www.osintinvestigate.com Bitget has suffered a $351.6 million cryptocurrency theft from its hot and warm wallets. The exchange says the attack shows patterns consistent with North Korean hacking groups. Here is what happened, how the attackers moved the funds, and what the incident reveals about the growing cybersecurity risks facing cryptocurrency exchanges.

Bitget says the $351.6 million theft from its systems closely matches techniques used by known North Korean threat actors, based on IP behavior and on-chain analysis. The company said the attackers abused a compromised backend system to approve fraudulent transfers, while hot wallets were affected and cold wallets were not. #Bitget...

Trump's Strategic Crypto Scam isn't just about money

Aftermath: The Ledger Hacker's $484k Heist. $484k stolen by exploiting Ledger's Connect Kit, distributing malicious code for fake transaction approvals on Web3 apps like Zapper and SushiSwap. #Cybercrime #CryptoHeist According to Blockonomi.

Theft deals blow to an industry that has been reinvigorated by Donald Trump’s re-election

North Korean Crypto Heists: Mobile and API Threats In this episode of Upwardly Mobile, we delve into the alarming tactics employed by North Korean state-sponsored hackers to siphon billions from the cryptocurrency world. Moving beyond targeting just large exchanges, these sophisticated actors, most notably the infamous Lazarus Group, are increasingly focusing on vulnerabilities in mobile devices and Application Programming Interfaces (APIs), the digital connectors powering our apps. We discuss how your phone, the device you carry everywhere, has become a prime target. Hackers are using sophisticated social engineering and phishing campaigns delivered via messaging apps and social media to trick users into compromising their devices. They develop or infect malicious cryptocurrency apps and fake wallets to steal private keys and transaction data. Furthermore, exploiting vulnerabilities in mobile operating systems and apps, or deploying Remote Access Trojans (RATs) through various mobile vectors, allows them persistent access to steal credentials and control crypto accounts. Reports indicate attackers have even leveraged remote collaboration tools to gain control.APIs, the unseen connectors that enable apps to communicate, are also major targets. North Korean hackers actively seek to steal API keys from developers and employees within crypto firms through phishing and malware. Campaigns like "Operation 99" specifically target developers for sensitive data, including API keys. Exploiting flaws in the design or implementation of exchange and wallet APIs allows them to bypass security or manipulate data. They also utilise supply chain attacks, compromising third-party vendors with API access to gain a foothold and exploit trusted connections. Attacks like the ByBit hack reportedly involved exploiting supplier vulnerabilities and altering wallet addresses, potentially involving API manipulations.These tactics have been linked to high-profile heists against major exchanges like KuCoin and WazirX, and DeFi protocols such as the Ronin Bridge. Stolen funds are then put through complex, multi-stage laundering processes involving mixers, DEXs, and cross-chain bridges to obscure their origin. We also cover essential defence strategies for both individuals and organisations in the crypto space. For individuals, this includes being hyper-vigilant against unsolicited messages, securing your mobile device with updates and trusted app sources, using hardware wallets for significant holdings, implementing strong, unique passwords and 2FA, and diligently verifying wallet addresses. For organisations, robust API security, regular security audits, employee training, supply chain risk management, and advanced threat detection are crucial.This battle is an ongoing arms race, but understanding these evolving threats is the first step to bolstering your defences. Sponsor: This episode is brought to you by Approov, a leader in API and mobile app security. Learn more about protecting your APIs and mobile applications from sophisticated threats by visiting approov.io. Keywords: North Korea, hackers, cryptocurrency, crypto, mobile security, API security, Lazarus Group, phishing, social engineering, malware, vulnerabilities, cybercrime, cyberattack, state-sponsored hacking, API key theft, supply chain attack, cold storage, hardware wallet, 2FA, MFA, security audit, threat detection, Ronin Bridge, KuCoin, WazirX, ByBit, Operation 99, fast flux, bulletproof hosting, OWASP API Security Top Ten, Approov.

Even though Bedrock lost $2 million to a smart contract exploit, it gave the hacker a job to help protect its protocol and get back money pilfered. Protocol for crypto-liquid restaking Bedrock had a security breach that cost them almost $2 million. The…

Malone Lam, a Singaporean national known as “Anne Hathaway” and “$$$,” pleaded guilty to racketeering for leading the Social Engineering Enterprise, which stole more than $245 million in cryptocurrency through coordinated scams and home break-ins. Prosecutors said the group impersonated Apple, Google, and customer support staff, targeted wealthy crypto holders, and...

True story of high-end GPU thieves in Shenzhen who stole $1.2 million worth of RTX 5080 graphics cards by replacing them with flashed RTX 3060s disguised to look like 5080s. Discover how this movie-heist-level scam worked and why it eventually unraveled. #GPUTheft #Nvidia #RTX5080 #ShenzhenHeist Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion