Crypto users fail ‘basic situational awareness’ at events, says Kraken

Crypto users fail ‘basic situational awareness’ at events, says Kraken

Kraken’s security team says that at crypto conferences, it’s seen unlocked laptops, phones left unattended and public discussions about personal wealth. Crypto conference attendees fail at “basic situational awareness” and security measures, opening themselves up to exploitation by bad actors hiding in the crowd at events, says crypto exchange Kraken. Kraken’s security team noted a…

Read More
Phone chipmaker Qualcomm fixes three zero-days exploited by hackers

Phone chipmaker Qualcomm fixes three zero-days exploited by hackers

Chipmaker giant Qualcomm released patches on Monday fixing a series of vulnerabilities in dozens of chips, including three zero-days that the company said may be in use as part of hacking campaigns.  Qualcomm cited Google’s Threat Analysis Group, or TAG, which investigates government-backed cyberattacks, saying the three flaws “may be under limited, targeted exploitation.”  According…

Read More
AI-powered OSINT tool profiles YouTube commenters, raising privacy concerns

AI-powered OSINT tool profiles YouTube commenters, raising privacy concerns

An OSINT platform, Lolarchiver, offers AI-powered tools that can rapidly profile YouTube commenters based on their activity, raising major privacy and legal concerns. An open-source intelligence (OSINT) service claims it can generate detailed profiles on YouTube users based solely on their comment activity. The tool, part of the “YouTube Tools” suite by pseudonymous developer Lolarchiver,…

Read More
US government sanctions tech company involved in cyber scams

US government sanctions tech company involved in cyber scams

The U.S. government imposed sanctions on Funnull, a company accused of providing infrastructure for cybercriminals running “pig butchering” crypto scams that have led to $200 million in losses for American victims.  On Thursday, the Treasury’s Office of Foreign Assets Control announced the sanctions, saying Funnull is “linked to the majority of virtual currency investment scam…

Read More
What are address poisoning attacks in crypto and how to avoid them?

What are address poisoning attacks in crypto and how to avoid them?

Address poisoning attacks involve tracking, misusing or compromising cryptocurrency addresses. Address poisoning involves sending small transactions from wallet addresses that closely resemble a legitimate one, tricking users into copying the wrong address when making future transactions.  Common techniques include phishing, fake QR codes, Sybil attacks, smart contract manipulation, and clipboard malware.  Address poisoning has led…

Read More