Connect with us

crime

North Korean hackers target crypto institutions via Chromium browser

Published

on



North Korean hackers, known as Citrine Sleet, have exploited a severe zero-day vulnerability in the Chromium browser to attack crypto financial institutions.

Citrine Sleet targeted financial institutions and crypto entities to steal digital assets. By creating fake crypto trading platforms, the North Korean hackers tricked victims into downloading malicious software, such as the AppleJeus trojan, which siphons off crypto funds, according to Microsoft.

This flaw allowed attackers to execute remote code, giving them control over infected systems. Microsoft identified the attack on August 19, and it has been linked to efforts targeting the crypto industry. 

The vulnerability, tracked as CVE-2024-7971, was a type of confusion flaw in Chromium’s V8 JavaScript engine, permitting attackers to bypass browser security and execute code within the browser’s sandbox, according to Microsoft.

In other words, the Chromium browser, which is the foundation for browsers like Google Chrome and Microsoft Edge, had a severe zero-day vulnerability. This means hackers discovered a serious flaw in Chromium before its own developers did. Hackers could use this flaw for malicious intentions — especially against crypto financial institutions.

Google addressed this vulnerability two days after the attack with a patch released on August 21.

Other malware

Alongside CVE-2024-7971, the hackers deployed malware titled ‘FudModule’ rootkit, which was designed to manipulate Windows’s security measures, according to Microsoft.

This rootkit was previously associated with Diamond Sleet, another North Korean group, suggesting that the same advanced tools are being shared among various North Korean threat actors.

Microsoft stated that Diamond Sleet had been observed using FudModule since October 2021.

Other North Korean hacks 

On August 15, Cybersecurity expert ZachXBT uncovered a sophisticated North Korean scheme involving IT workers posing as crypto developers. This operation resulted in a $1.3 million theft from a project’s treasury and revealed over 25 compromised crypto projects. 

The stolen funds were laundered through multiple transactions, including bridging from Solana to Ethereum and depositing into Tornado Cash. Investigations connected these activities to a network of 21 developers and traced funds back to North Korean IT workers.

Crypto hacks

The crypto sector, already a frequent target of cyber attacks, faces increased risks as these sophisticated threat actors exploit vulnerabilities in widely used software. Microsoft advised users and organizations to update their systems promptly, use secure and updated web browsers, and enable advanced security features like Microsoft Defender to safeguard against such threats.



Source link

Canada

Crypto influencer Kevin Mirshahi found dead in Canadian park

Published

on



The body of Kevin Mirshahi, a 25-year-old cryptocurrency influencer who had been missing since June, was found dead.

Mirshahi’s body was discovered in Montreal’s Île-de-la-Visitation Park, as confirmed by the Sûreté du Québec, according to the Montreal Gazette. 

A passerby came across his decomposing body, prompting an investigation that identified him through an autopsy.

The case, which marks Montreal’s 32nd homicide of 2024, has highlighted a concerning pattern of violence within the crypto community, raising questions about the safety of high-profile figures in the sector.

Timeline of Mirshahi’s disappearance and death

Mirshahi’s disappearance occurred on June 21. Early that morning, he and three others were allegedly abducted from a condo building in Old Montreal.

Montreal police were alerted after receiving a 911 call about a disturbance at a residence near de la Commune and St-Hubert Streets, according to The Gazette.

While the three other abductees were quickly located, Mirshahi remained missing, prompting police to escalate the investigation to the SQ.

During the initial investigation, police identified Joanie Lepage, a 32-year-old woman from Les Cèdres, Quebec, as a suspect, per The Gazette.

In August, she was arrested and charged with first-degree murder and involvement in Mirshahi’s abduction. Authorities allege that Lepage played a role in concealing Mirshahi’s death, though investigations are ongoing to determine if other suspects may have been involved.

Mirshahi’s background in crypto 

Mirshahi was a prominent figure in Montreal’s cryptocurrency scene, primarily due to his management of a private investment firm called “Crypto Paradise Island,” per The Gazette.

His activities in the crypto space attracted public and regulatory scrutiny, particularly from Quebec’s investment authority, the Autorité des Marchés Financiers.

The AMF placed restrictions on Mirshahi in 2021, barring him and two associates from acting as investment advisers or conducting securities transactions. Two weeks after his disappearance, this ban was reinforced in July 2024, limiting his online activities and requiring him to cease promoting related content on social media.

This case isn’t the first crypto-related crime that happened in Canada this month. On Nov. 6, Toronto police investigated the kidnapping of WonderFi CEO Dean Skurka, who was abducted in downtown Toronto and released after a $1 million ransom was paid electronically.





Source link

Continue Reading

crime

Tether helps Canadian police recover stolen crypto

Published

on



Tether recently assisted the Ontario Provincial Police in recovering $10,000 CAD worth of stolen cryptocurrency.

This recovery was achieved through Tether’s collaboration with the OPP’s Cyber Investigations Team, showcasing the company’s commitment to supporting law enforcement in combating cybercrime.

Tether responded to the OPP’s request by freezing the Tether (USDT) involved in the theft, which allowed the digital assets to be returned to their rightful owner.  

Detective Staff Sergeant Addison Hunter of the OPP acknowledged Tether’s voluntary cooperation as essential in recovering the stolen funds, according to Tether’s press release.

Tether has established itself as a partner to law enforcement in tackling cybercrime, claiming it has aided over 195 law enforcement agencies across 48 countries.

Tether also announced on November 8 that it had completed its first funding transaction in a Middle East crude oil investment, expanding the company’s ventures beyond just crypto.

Tether in the hot seat? 

Recently, on the United States legal front, Tether denied reports that the company was under investigation for anti-money-laundering and sanctions law violations. 

Manhattan prosecutors were reportedly investigating whether Tether’s cryptocurrency had been involved in illegal activities. The U.S. Treasury Department was also said to be considering sanctions on Tether, which could potentially limit American business dealings with the company.

Ceo Paolo Ardoino rejected these claims on X, asserting there was no indication of an investigation and calling the reports “old noise.”



Source link

Continue Reading

crime

Nic Carter slams Minneapolis Fed President for saying crypto is ‘almost never’ used outside of criminal activity

Published

on



Venture Capitalist Nic Carter criticizes Minneapolis Federal Reserve President Neel Kashkari for his remarks on how crypto is “almost never” used outside of illicit activity, even though the data tells a different story.

In an X post on Oct. 22, Nic Carter wrote “being this wrong should be illegal” in response to Neel Kashkari’s remarks about cryptocurrency being mostly used for illegal activities. He viewed Kashkari’s comments as unfortunate, as he is one of the top ten most important financial regulators on the planet.

Carter followed up his post by linking several data sources that disprove Kashkari’s assumption, including a report from blockchain data firm Chainalysis that found only 0.34% of all crypto transactions in 2023 had connections to illegal activity.

The report revealed that illicit transactions in crypto peaked in 2019 at just 1.29%.

At a Wisconsin Town Hall event hosted by the Chippewa Falls Area Chamber of Commerce on Oct. 21, Minneapolis Fed President, Neel Kashkari, claimed that “very few transactions were actually happening” in crypto.

“They’re not paying for goods and services using crypto. It almost never happens unless people are buying drugs or other illegal activities,” said Kashkari.

A recent study by Crypto ISAC revealed that cash remains the preferred criminal’s financial tool for criminal activities. Although cryptocurrencies have been linked to number of high-profile crimes, including exchange collapses and thefts, the actual portion is still significantly small.

Though it is difficult to track the exact amount of illicit activity in the traditional finance space, Crypto ISAC notes that the estimated amount of money laundered globally in one year is 2% to 5% of global GDP, which ranges between $800 billion to $2 trillion.

Out of that total number, only 0.34% of the transaction volume consists of cryptocurrencies. The U.S. Treasury also echoed these findings, stating that cash continues to be the primary preferred method for money laundering because of its anonymity, stability, and ubiquity.

Kashkari’s stance on cryptocurrency has remained the same in the past few years. In Feb. 2024, Kashkari said that Bitcoin(BTC) is a risky asset with no practical use in real economic scenarios, further questioning the cryptocurrency’s ability to be an effective hedge against inflation.

On Oct. 17, the Minneapolis Fed published a paper urging governments to either ban Bitcoin or enact a Bitcoin tax if they want to maintain their permanent primary deficits.



Source link

Continue Reading
Advertisement [ethereumads]

Trending

    wpChatIcon