Search: “cryptocurrency theft”

694 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 484 Ransomware 348 Phishing & fraud 202 Threat actor 187 Vulnerability 153 Policy & legal 114 Data breach 112 Exploit / PoC 77 Industry 30 Advisory 4 Research 3 AI safety & security 1 Tools 1 AI tools & infra 1

SeverityAll critical 445 high 695 medium 386 low 184 info 7

‘White hat’ hackers take $47 million bounty after $320 million crypto theft

Hackers withdrew $320 million in bitcoin from Liquid Network, negotiated on-chain, returned $266.5 million and kept a $47 million reward.

Purported white-hat hackers withdrew 4,000 BTC (about $320 million) from Liquid Network's own wallet, one of the largest cryptocurrency thefts of 2026. Over roughly 12 hours of public on-chain negotiation with operator Blockstream, the hackers returned $266.5 million in bitcoin and kept 598.5 BTC (about $47 million), claiming it as a reward for uncovering a bug. Blockstream deployed updated software and paused deposits and withdrawals while experts traced the flaw to the Elements sidechain framework. April thefts of $290 million from Kelp and $280 million from Drift, attributed to North Korean hackers, were previously 2026's largest.

The RecordSep 8, 17:00 UTC · 8d agoData breach in the wild

Feds seized $23 million in crypto stolen using keys from LastPass breaches

Security AffairsMar 10, 08:10 UTC · Mar 10, 2025Data breach

Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

The Hacker NewsJun 12, 06:39 UTC · Jun 12, 2026Ransomware

Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware

The Hacker NewsFeb 6, 07:14 UTC · Feb 6, 2025Malware

Ransomware Crypto Laundering Platform Taken Out by FBI and Europol

Infosecurity MagazineJun 12, 14:00 UTC · Jun 12, 2026Ransomware

California man pleads guilty to RICO charges as DOJ indicts crypto theft gang

The RecordDec 9, 21:45 UTC · Dec 9, 2025Phishing & fraud

North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms

Infosecurity MagazineFeb 11, 16:35 UTC · Feb 11, 2026Malware

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

The Hacker NewsAug 25, 15:10 UTC · Aug 25, 2025Ransomware

Scattered Spider’s Structure More Like a Cybercrime Collective

Infosecurity MagazineJul 7, 14:00 UTC · Jul 7, 2026Ransomware

Party’s over for scammers who went on spending spree after $240M bitcoin theft

AP report on scammers' spending spree after a $240 million bitcoin social engineering theft, as ringleader Malone Lam nears a plea agreement.

DataBreaches.net syndicates AP reporting on the $240 million bitcoin theft from a Washington, D.C. resident via social engineering calls impersonating Google and Gemini. Alleged ringleader Malone Lam, 22, faces a plea hearing; the scam network spent stolen funds on cars, jets, and mansions before FBI arrests. Crypto investment fraud complaints to the FBI rose nearly 50% in 2025.

DataBreaches.netSep 8, 11:32 UTC · 8d agoPolicy & legal

BlueNoroff Deepfake Zoom Scam Hits Crypto Employee with macOS Backdoor Malware

The Hacker NewsJul 7, 04:24 UTC · Jul 7, 2025Malware1

Kaspersky report on cryptojacking in Q1

Kaspersky SecurelistNov 10, 08:00 UTC · Nov 10, 2022Ransomware

North Korea's Lazarus Group Suspected in $31 Million CoinEx Heist

The Hacker NewsSep 18, 03:03 UTC · Sep 18, 2023Threat actor

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed

The Hacker NewsMar 24, 05:52 UTC · Mar 24, 2025Vulnerability CVE-2025-30066 CVE-2025-30154

Lazarus Doesn't Need AGI

Recorded FutureApr 28, 00:00 UTC · Apr 28, 2026Threat actor

How can we avoid another record year for breaches and ransomware?

Help Net SecurityMay 28, 09:48 UTC · May 28, 2020Ransomware

The Dark Nexus Between Harm Groups and ‘The Com’

Krebs on SecuritySep 15, 00:00 UTC · Sep 15, 2024Ransomware

U.S. Seizes Cryptocurrency Worth $30 Million Stolen by North Korean Hackers

The Hacker NewsSep 10, 09:33 UTC · Sep 10, 2022Ransomware

DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six Years

The Hacker NewsJan 15, 11:49 UTC · Jan 15, 2025Phishing & fraud

Feds charge 12 more suspects in RICO case over crypto crime spree

The RecordMay 16, 17:51 UTC · May 16, 2025Data breach

AT&T sued for enabling SIM swap fraud

Help Net SecurityAug 16, 00:00 UTC · Aug 16, 2018Phishing & fraud

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

The Hacker NewsJun 16, 04:25 UTC · Jun 16, 2024Ransomware

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

Krebs on SecurityApr 21, 15:27 UTC · Apr 21, 2026Ransomware

North Korean hackers targeted crypto exec with fake Zoom meeting, ClickFix scam

The RecordJul 16, 00:00 UTC · Jul 16, 2026Phishing & fraud

Mining Malware: Signals of a Shift in Cybercrime

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Malware

The BlueNoroff cryptocurrency hunt is still on

Kaspersky SecurelistJan 13, 09:00 UTC · Jan 13, 2022Vulnerability CVE-2017-0199

Five alleged members of Scattered Spider cybercrime group charged for breaches, theft of $11 million

The RecordNov 20, 21:20 UTC · Nov 20, 2024Ransomware

Revolut Data Breach Exposes Customers’ Passport Copies and Full Transaction Histories to Hackers

Revolut leaked KYC documents and full transaction histories after a fraudulent, domain-authenticated email request impersonating a government agency.

Revolut disclosed that an attacker using an unauthorized email account on a legitimate government domain, with valid domain-authentication credentials, tricked the fintech into releasing customer data. The exposed data includes passport and driver's license copies, identity-verification selfies, full names, dates of birth, addresses, IBANs, and complete transaction histories including Bitcoin activity. Revolut says core systems, accounts, and funds were not compromised, and it blocked the email source and notified authorities. On-chain investigator ZachXBT and others indicated the operation targeted high-net-worth users facing elevated phishing, SIM-swap, and extortion risk.

Cyber Security NewsSep 13, 05:09 UTC · 4d agoData breach3· 1 read