
Hackers steal $133 million from French bank via service provider
Crédit Mutuel Arkéa confirms fraudulent transfers up to 133 million euros through service provider; customer assets unaffected.
170 stories, newest first · one card per story

Crédit Mutuel Arkéa confirms fraudulent transfers up to 133 million euros through service provider; customer assets unaffected.

The actor moves from exposed non-production systems into production, then tests Rs. 1 transfers before larger thefts.

Binance says worse_query hits iOS 26.7.1, 27.0.1 and 27.2; no attacks are reported and Apple has not confirmed a fix.

The group demanded $900,000 on November 4; Binance says the sample does not match how it stores data.

About 117,000 NEAR, valued at $430,000, moved through six disposable NEAR tokens from November 5 to 7.
Transfer graphs for 2,700 SolRPDS tokens already differ in size, density, and centralization within 12.5 minutes.

It cites a Binance incident affecting about $6.34 billion and promotes Ambire’s new Ice hardware wallet.

He used case-system passphrases in about 100 transfers tied to 35 FBI investigations and faces sentencing on March 4.

Doctor Web says the loader disables antivirus, then deploys AsyncRAT, a crypto clipper and a data stealer.

The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.

Binance froze $2.8 billion in stolen stablecoins after a $6.3 billion heist by the TraderTraitor group.

The same newsletter repeats claims about Railway agents, freezer attacks in 10 countries, and a Binance theft.

Crédit Mutuel Arkéa confirms a cyberattack enabling fraudulent transactions but has not confirmed reported loss figures.

Attackers stole 233.46 million XRP, 970,500 SOL and 44.2 million OP from Binance hot wallets using compromised engineer credentials.

Hackers used fake recruiter contacts to trick an engineer into downloading malware, stealing $6.3 billion in crypto.

Hackers compromised engineers through fake job interviews to access wallet signing service and move funds across blockchains.
FBI blames North Korea’s TraderTraitor; Pyongyang denies it, and about $2.85 billion was frozen.

BTCPay Server incident update warns of exploitation in hot wallets.

BTCPay Server 2.4.1 and earlier hot wallets targeted by attackers using .macaroon credential files; latest version 2.4.7 unaffected.

Attackers used a compromised developer laptop and Ethereum delegation to drain $6.3B from Binance hot wallet in 20 minutes.
Hackers stole more than $46 million from Brazil's largest crypto exchange in an incident that suspended deposits and withdrawals.
Polymarket will refund $3.9 million to affected users after a site compromise, with 95% of wallets refunded in full as of Saturday.

Volt Typhoon uses silent train for zero-day attacks; Cursor extension has SSH backdoor and Polymarket loses $2.7M to hack.

The November 2 roundup also cites a claimed $6.3 billion Binance theft and exposure of about 4.9 million student-aid records.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views