https://www.osintinvestigate.com Bitget has suffered a $351.6 million cryptocurrency theft from its hot and warm wallets. The exchange says the attack shows patterns consistent with North Korean hacking groups. Here is what happened, how the attackers moved the funds, and what the incident reveals about the growing cybersecurity risks facing cryptocurrency exchanges.

Bitget says the $351.6 million theft from its systems closely matches techniques used by known North Korean threat actors, based on IP behavior and on-chain analysis. The company said the attackers abused a compromised backend system to approve fraudulent transfers, while hot wallets were affected and cold wallets were not. #Bitget...

Malone Lam, a Singaporean national known as “Anne Hathaway” and “$$$,” pleaded guilty to racketeering for leading the Social Engineering Enterprise, which stole more than $245 million in cryptocurrency through coordinated scams and home break-ins. Prosecutors said the group impersonated Apple, Google, and customer support staff, targeted wealthy crypto holders, and...

True story of high-end GPU thieves in Shenzhen who stole $1.2 million worth of RTX 5080 graphics cards by replacing them with flashed RTX 3060s disguised to look like 5080s. Discover how this movie-heist-level scam worked and why it eventually unraveled. #GPUTheft #Nvidia #RTX5080 #ShenzhenHeist Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion

 Cybercriminals are increasingly borrowing the language and tactics of public relations, and a new campaign shows how effective that can be. According to researchers, attackers promoted malicious crypto-related tools by creating a polished online presence across GitHub, YouTube, VirusTotal, and other channels. The goal was not only to spread malware, but also to build an illusion of trust that would lower suspicion among users and researchers. At the center of the operation was a Rust-based clipboard hijacker, a type of malware that watches for cryptocurrency wallet addresses copied into a victim’s clipboard. When it detects one, it swaps the address with one controlled by the attackers, causing funds to be sent to the wrong destination. This simple trick can be highly profitable because it targets users at the exact moment they think they are making a legitimate transfer.  What makes the campaign notable is its layered distribution strategy. Researchers found dedicated phishing pages, fake GitHub and SourceForge projects, and even a YouTube channel designed to make the software look popular and credible. The channel reportedly used AI-generated narrators, suspicious view spikes, and enthusiastic comments that were likely coordinated to reinforce the appearance of real demand. Instead of relying on one channel, the attackers created a network of signals that seemed to validate one another.  The operation also extended into reputation manipulation on security platforms. By using large numbers of fake accounts, sometimes described as “Ghost Networks,” the attackers attempted to influence systems such as VirusTotal and make their tools appear harmless or merely falsely flagged. That tactic matters because many users and even defenders glance at reputation data before deciding whether a file is safe. If the data is polluted, the warning signs become harder to trust.  This campaign shows how malware distribution is evolving beyond obvious spam and sketchy downloads. Attackers now understand that credibility itself can be weaponized, especially when users rely on social proof, star ratings, comments, and public scans to judge safety. The result is a more convincing, more scalable deception that blends technical abuse with marketing-style manipulation.  For users, the lesson is to treat polished packaging as a warning sign rather than reassurance. Check the source of any crypto tool carefully, verify wallet addresses before sending money, and avoid downloading software because it looks popular or well reviewed. For defenders, the case is a reminder that reputation systems can be gamed, so detection must look beyond surface-level trust signals.

YouTube video by Crypto Cobra

The Verus-Ethereum cross-chain bridge was exploited for over $11.5 million due to a logical flaw in its validation process, allowing an attacker to drain reserves with a forged transaction.

The Drift cryptocurrency platform disclosed a months-long, in-person social engineering operation that culminated on April 1 with the theft of more than $280 million. The attackers—linked to North Korean state-affiliated UNC4736 and the AppleJeus/Citrine Sleet operation—used fabricated professional identities, Telegram communications, and likely malicious TestFlight and code-repository vectors to compromise contributors...

Security experts say hundreds of millions of dollars in cryptocurrency were stolen from Drift after the platform confirmed an active cyberattack and suspended deposits and withdrawals. Firms estimated losses between about $130 million and over $285 million as the attacker repeatedly converted funds while security teams and exchanges work to contain...

The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an unauthorized contract upgrade that allowed asset withdrawals.

MIT grads Anton & James Peraire-Bueno face trial for allegedly stealing $25M in crypto via a 'sandwich attack' on the Ethereum blockchain. A mistrial was declared after jury deadlock. What does this mean for digital fraud? Find out more! #CryptoHeist #Ethereum #Cybercrime #News 2025-11-08 Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion

Five years of silence before exposure