Bitcoin surged past $87,000, marking a significant gain of over 7% in a single day. Other cryptocurr...

The digital transformation of the Best Fintech Companies in Japan has been explosive. This explosive transformation has been accompanied by innovative technologies and service offerings all within a rigid regulatory framework. Innovations in financial services have redesigned how individuals and firms manage their finances. Innovative financial services have also helped reduce the reliance on cash, addressed the financial needs of small businesses, and begun the process of integrating cryptocurrencies into the Japanese economic environment.

A significant market participant has recently increased their commitment to the Solana network by locking up a substantial amount of assets. According to on-chain data monitored on September 15, 2026, a single cryptocurr…

New #hybridWar #hybridWarTechReset thread. I want at least backups to US digital services I use. Starting with browser because ads. I briefly considered @brave but had forgotten it supports cryptocurr...

Welcome to another edition of Insight Monitor where we continue our examination of Iran’s hybrid threat finance strategy, use of digital assets to finance terrorist groups, and its proxy network. Toda...

Welcome to another edition of Insight Monitor where we continue our examination of Iran’s hybrid threat finance strategy, use of digital assets to finance terrorist groups, and its proxy network. Toda...

The official Pokémon account on X was compromise...

Welcome to another edition of Insight Monitor where we continue our examination of Iran’s hybrid threat finance strategy, use of digital assets to finance terrorist groups, and its proxy network. Toda...

Daily BotPredictAI BTC analysis covering Bitcoin market structure, sentiment shifts, and key levels traders are watching.

When I examine crypto marketing, I realize that influencer platforms are so essential to projects such as mine. We not only need presence, but we really need voice - those that engage authentically and share with communities across all social media channels such as Twitter/X, YouTube, TikTok and Telegram. Selecting a well-qualified crypto influencer marketing agency could be all the difference in the success of your token launch, NFT mint or DeFi strategy, so I’ve surveyed the leading cryptocurrency marketing channels - taking into account key factors like their pricing structure, KOL network size and quality and the value they deliver.

Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments. [...]

Explore this post and more from the CryptoCurrency community

Criminals are using fake game downloads to slip a sophisticated information stealer onto Windows computers. The campaign hides behind supposed games, mods, cracks, and other software, exploiting the trust and urgency around free or hard-to-find downloads. A downloaded archive can appear harmless and may even display a loading or installation screen. Behind that screen, a hidden chain of programs prepares Amatera Stealer, malware built to collect passwords, browser data, cryptocurrency-wallet information, messaging-app data, and local files. Malwarebytes said in a report shared with Cyber Security News (CSN) that the activity uses RenPy Loader, a multi-stage framework that turns a legitimate game-development engine into a delivery vehicle. Researchers found the campaign on malicious download sites, game portals, and file-sharing services, where redirects can lead victims through several lookalike pages. Example of an archive downloaded from a malicious website (Source – Malwarebytes) The risk goes beyond a lost game account. Stolen browser credentials and session data can open a route into email, social media, financial services, and business systems, while wallet theft can result in immediate and irreversible losses. Hackers Turn Fake Games Into Multi-Stage Infostealers The infection starts when a victim opens Setup.exe from a downloaded archive. RenPy Loader abuses RenPy, an open-source engine commonly used for visual novels and interactive fiction, to conceal malicious Python-enabled content inside a package that looks related to gaming. The first stage checks for analysis environments, decrypts a ZIP archive, and writes its contents to a random temporary folder. It then removes Windows Mark of the Web protection from extracted content and uses forfiles.exe to launch a batch file, making a routine-looking installer the entry point for a much larger operation. One of the pages detected that start the infection chain (Source – Malwarebytes) That batch file invokes MSBuild, a legitimate Windows build component, to load a tampered .NET library called Nancy. The library decrypts data, alters network settings, performs anti-forensics activity, and launches another hidden component. This approach resembles  MsBuild abuse in malware , where trusted Windows utilities can be repurposed to mask malicious execution. The next downloader, GollopDevest.dll, uses EtherHiding to retrieve its command server from blockchain data rather than storing the address directly in the malware. The installation screen (Source – Malwarebytes) That complicates takedowns and detection, a tactic also seen in  blockchain-based EtherHiding malware technique . It then pulls down additional components that finally decrypt and run Amatera Stealer. Credentials and Wallets at Risk Amatera targets information that can be quickly converted into access or money. Browser passwords, cookies, and other session data may let an attacker enter services without repeatedly requesting credentials, while cryptocurrency wallets, extensions, messaging apps, and files expand the possible damage to individuals and organizations. The payload is not fixed across every RenPy Loader operation. Researchers have previously observed the loader distributing HijackLoader and Lumma Stealer, suggesting operators can change the final malware to suit a campaign. Readers tracking earlier Amatera Stealer activity or a  malicious game cheat package campaign  should treat unsolicited gaming downloads as a broader malware-delivery risk. Fake cheats, cracks, and unofficial mods can all provide an effective lure for malware operators. Comparison between the legitimate and trojanized Nancy DLLs (Source – Malwarebytes) The practical defense is straightforward: download games and software only from official sites, trusted stores, or established platforms. Avoid cracked releases and unofficial mods, inspect archives before opening executable files, and leave any download path that bounces through unfamiliar sites or file-sharing pages. Users should also keep Windows, browsers, and security software updated, because a polished installer or familiar hosting service is not proof that a download is safe. Organizations can reduce exposure by restricting unapproved software, monitoring unusual MSBuild activity, and resetting exposed passwords promptly. Security teams should review alerts for unexpected Setup.exe, MSBuild, and forfiles.exe activity after game installations, then preserve suspicious archives for analysis. Investigation can identify accounts, isolate devices, and prevent stolen sessions from being reused against services. Indicators of Compromise (IoCs):- Type Indicator Description Domain downpro.net Fake download website Domain macisofile.sbs Fake download website Domain visitmama.blog Fake download website Domain visitmama.guru Fake download website Domain getgamerfree.com Fake download website Domain fullgames.digital Fake download website Domain flingbase.net Fake download website Domain citronemu.com Fake download website Domain filemodo.xyz Distribution infrastructure Domain storage06x.cfd Distribution infrastructure Domain p03sil.cyou Distribution infrastructure Domain wimsedas.xyz Distribution infrastructure Domain againstmor.store Distribution infrastructure Domain host03q.cfd Distribution infrastructure Domain cloud01y.cfd Distribution infrastructure Domain storage11x.cfd Distribution infrastructure Domain storage04x.cfd Distribution infrastructure Domain host82p.cfd Distribution infrastructure Domain cloud05y.cfd Distribution infrastructure Domain analyticstrack-pzh.click Tracking website Domain login.orbitalframework.cc Amatera Stealer C2 IP address 144.124.251.171 Used to obtain additional payloads IP address 195.63.140.33 Used to obtain additional payloads IP address 78.40.196.252 Used to obtain additional payloads MD5 29203ca123d51b1b33505a0813d360df First-stage loader, trojanized DLL MD5 810F257542018BE0FC62AF542D13D012 GollopDevest DLL downloader MD5 681DB529E402467A4B0567C82A350FC0 PavinWride DLL anti-analysis component MD5 2E116632248A7E1F8AA6BCA92D9C1C90 GollopDevest DLL loader MD5 F8453EFE408CE25B9484F872797E3D63 Final payload Note:   IP addresses and domains are intentionally defanged (e.g.,  [.] ) to prevent accidental resolution or hyperlinking. Re-fang only within controlled threat intelligence platforms such as MISP, VirusTotal, or your SIEM . ! ALERT: 20+ government sites delivered malware to businesses and citizens.  See full attack research  to check your own exposuremalware to businesses an The post Hackers Turn Fake Games Into Multi-Stage Infostealers That Steal Passwords and Crypto Wallets appeared first on Cyber Security News .

By Andy Greenberg. As blurbed by Garrett "Watergate" Graff, the "stranger-than-fiction tale of a how a small team of geeks and federal agents cracked what was once thought to be untraceable cryptocurr...

Blackrock CEO Larry Fink said he is bullish on markets, citing early gains from technology-driven margin expansion. He also said the washout of excessive leverage has left bitcoin and the broader cryptocurrency market more stable. Why Larry Fink Is Bullish on Markets Larry Fink, CEO of Blackrock, the world’s largest asset manager, said in a […]

Posted by East_Honey_8669 - 1,444 votes and 107 comments

Explore this post and more from the CryptoCurrency community

Data shows the crypto derivatives market has suffered a massive amount of liquidations following the plunge that Bitcoin, Ethereum, and other assets have seen.Bitcoin Ethereum Are Both Down More Than 5% For The Past WeekThe second half of May so far has seen a reversal of trend for the cryptocurr…

The Shiba Inu cryptocurrency has experienced a significant shift in its holder base, with a massive exodus of tokens from exchange wallets. This development comes at a time when the broader cryptocurr

By Alex Tapscott | Don Tapscott • 3.5/5 stars