Hidden Malware in Steam-Linked Games Led to a Federal Arrest
Federal prosecutors say malware hidden inside games listed on Steam reached thousands of devices and accessed about 80 crypto wallets. The complaint ties the alleged scheme to at least $220,000 in losses and follows earlier warnings about BlockBlasters and other flagged titles.
Ill Bloom Vulnerability Exposes Thousands of Crypto Wallets After $5M Theft
Security researchers have uncovered the Ill Bloom vulnerability, a flaw in wallet recovery phrase generation that has already led to at least $5 million in cryptocurrency theft. Here's what happened, which wallets may be affected, and how users can check whether they're at risk.
USB-Spreading Malware Poses New Threat to Crypto Wallet Users
Microsoft has disclosed a cryptocurrency-targeting malware campaign that spreads through USB drives and disguises itself as legitimate files. The threat can replace wallet addresses, steal sensitive crypto data, and maintain persistent access to infected Windows devices, raising fresh security concerns for digital asset holders.
TrapDoor Malware Targets Crypto Developers Through Fake Open-Source Packages
Socket Security researchers uncovered TrapDoor Malware, a supply-chain attack targeting crypto and AI developers through malicious open-source packages. The campaign affected npm, PyPI, and Crates.io ecosystems while attempting to steal credentials, wallet data, and developer access tokens.
Unauthorized eBTC Mint Pressures Echo Token and DeFi Markets
Echo Protocol paused cross-chain transactions after an attacker minted roughly 1,000 unauthorized eBTC on its Monad deployment. While the unauthorized supply was valued near $76.7 million, researchers said the realized extraction appeared far smaller. The incident has renewed scrutiny around DeFi bridge security and privileged access controls.
