North Korean group steals $6.43B from Binance
Original title: ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Volt Typhoon uses silent train for zero-day attacks; Cursor extension has SSH backdoor and Polymarket loses $2.7M to hack.
FBI attributes record $6.43 billion crypto theft from Binance to North Korean TraderTraitor across 11 blockchains with $2.85 billion frozen. Volt Typhoon deploys rotating compromised devices for silent zero-day attacks on critical infrastructure. Additional incidents include Polymarket hack, ChatGPT share link exploitation, and Cursor supply-chain backdoor.
Unconfirmed: How threat actor published malicious extension and access level obtained
- $6.43B stolen from Binance, $2.85B frozen by Tether Circle Ripple
- Volt Typhoon silent train uses SOHO IoT enterprise devices
- Polymarket loses $2.7M to DebugBear compromise
- Cursor tampered extensions impact up to 5,000 users
- ChatGPT share links enable JS execution in sessions
| Product | Affected |
|---|---|
| Cursor Marketplace | — |
| ChatGPT | — |
| Polymarket | — |
- 1.rotate keys
- 2.avoid sharing links
- 3.upgrade systems
- Products
- BinanceCursorPolymarket
- Threat actors
- TraderTraitorVolt Typhoon
- Victims
- Polymarket usersCursor users
- Organizations
- FBIDoJParameter Labs
- Countries
- North KoreaChinaUnited States
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | redcoolmedia.net | r third-parties, or redirect users to one of their pages on redcoolmedia.net or runapps.org Microsoft revealed details of two human-oper |
| domain | runapps.org | redirect users to one of their pages on redcoolmedia.net or runapps.org Microsoft revealed details of two human-operated intrusions |
From the original article
12 min read at thehackernews.com
Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.