Darktrace has reported new malware hijacking Windows Character Map to conduct cryptomining attacks, exposing how everyday processes can be weaponized for hidden exploitation. The attack, detected in July 2025, underscores the growing sophistication of cryptojacking campaigns and the risks they pose to enterprise environments. How the Attack Worked On July…
An investigation on July 26, 2025 uncovered a widespread campaign involving fake GitHub repositories distributing malware strains such as RedLine and DeerStealer, designed to harvest cryptocurrency wallet credentials. The open source malware operation infiltrated developers and investors seeking blockchain tools—and leveraged open source software security gaps to propagate the malware.…
The Chrome zero‑day CVE‑2025‑6558, discovered July 18, 2025, enables remote attackers to bypass Chrome’s GPU sandbox on Windows, macOS, and Linux. Malicious HTML can escape confined processes, placing crypto wallet credentials at risk. This article examines the vulnerability’s mechanics, the affected users—especially in crypto circles—and the urgency of patching. Nature of the…
On July 17, 2025, a sophisticated Cloudflare BGP hijack attempt aimed to divert cryptocurrency transaction traffic to dark web servers. Though thwarted, the incident exposed vulnerabilities in internet routing that threaten blockchain security. This article breaks down the attack, its potential impact, and practical steps for crypto investors to safeguard…
In July 2025, a vicious phishing campaign hit Bitget Wallet users, draining $6.3 million in crypto through fake airdrop scams. Attackers leveraged social engineering to steal seed phrases, exposing vulnerabilities even in non-custodial wallets. This article unpacks the Bitget phishing scam, its impact, and how investors can stay safe. Anatomy…
In May 2025, the decentralized finance (DeFi) world was rocked by a massive smart contract breach that saw $223 million in crypto assets stolen from Cetus Protocol, a leading decentralized exchange (DEX) on the Sui blockchain. The attack, which exploited a critical vulnerability in the protocol’s liquidity pool smart contracts,…
