Related Threat Clusters
-
Crypto Theft Surge: $2.87 Billion Stolen in 2025 Amid Evolving Threat Landscape
In 2025, cryptocurrency thefts have surged significantly, with over $2 billion stolen in just the first half of the year, marking a 17.27% increase compared to 2022. The ByBit hack, attributed to North Korean state…
3 articles · Updated May 15, 2026 -
Russian UAT-11795 Targets Users with Trojans in Legitimate Software
A Russian threat actor known as UAT-11795 has been deploying the Starland RAT and WLDR agent since June 2025, primarily targeting users in the U.S., Germany, Romania, and Venezuela. The group uses trojanized installers…
6 articles · Updated July 17, 2026 -
Malware-as-a-Service Campaign Targets Users with ClickFix and Cruciferra
A new Malware-as-a-Service (MaaS) campaign has emerged, utilizing ErrTraffic and Cruciferra to distribute malware while evading endpoint security. The campaign, identified by eSentire's Threat Response Unit, began in…
2 articles · Updated August 21, 2026 -
Web3 Security Breach: SecondFi Wallet Exposes Private Keys via Signature Flaw
In June 2026, the crypto sector faced 40 major hacking incidents, leading to losses of $75.87 million. The SecondFi wallet, part of the Cardano ecosystem, was notably compromised, with attackers transferring…
2 articles · Updated July 9, 2026 -
The Sandbox Exploit: 14.9B Unbacked SAND Tokens Minted on Base and BNB Chain
On August 22, 2026, The Sandbox reported a security breach that allowed an attacker to mint 14.9 billion unbacked SAND tokens on the Base and BNB Smart Chain networks. The exploit involved hijacking LayerZero delegate…
24 articles · Updated August 22, 2026 -
Artlist Subdomain Compromised in ClickFix Campaign Using EtherHiding Technique
In July 2026, a ClickFix campaign was discovered on the Artlist subdomain new-blog.artlist[.]io, where attackers injected malicious code that masqueraded as a CAPTCHA to install a Remote Access Trojan (RAT). The attack…
33 articles · Updated July 14, 2026 -
DeadLock Ransomware Utilizes Decentralized Recovery Infrastructure
DeadLock ransomware has emerged as a significant threat, employing a decentralized recovery chat that integrates the Polygon blockchain and the Session messenger. This ransomware utilizes a Rust-based encryptor that…
9 articles · Updated August 10, 2026 -
Triple-A Hot Wallets Exploit Leads to $12M Loss Across Six Blockchains
Triple-A, a Singapore-based crypto payments gateway, experienced a security breach that drained approximately $12 million from its hot wallets across six blockchains, including Ethereum, TRON, and Polygon. The incident…
2 articles · Updated July 26, 2026 -
Aeternum Botnet Leverages Polygon Smart Contracts for Resilience
The Aeternum botnet has emerged as a sophisticated loader that utilizes Polygon's blockchain to store its operational instructions, making it challenging to dismantle. This malware targets Windows systems via multiple…
2 articles · Updated August 14, 2026 -
Polymarket Suffers $3M Theft from Supply-Chain Attack via Third-Party Vendor
On June 25, 2026, Polymarket confirmed a security breach that led to the theft of approximately $3 million from fewer than 15 user accounts. The attack was executed through a compromised third-party vendor, which…
49 articles · Updated June 25, 2026
Recent Intelligence Reports
- RevStealer Is Built to Be Silent — Morphisec · August 31, 2026
- Polygon Discloses Fixed Security Vulnerabilities in the Austin and Kyoto Hard Forks — Kucoin · August 30, 2026
- Polygon Discloses Security Flaws Fixed in Hard Forks, Says No Mainnet Exploitation Found — En.Bloomingbit · August 30, 2026
- Sandbox Bridge Hack Mints 14.9B SAND While Coinbase Delists Futures — News.Bitcoin · August 23, 2026
- Sandbox Contains Exploit After Attacker Mints 14.9B SAND Tokens — Yellow · August 23, 2026
- Read the article at Coinpaper — coinpaper.com · August 23, 2026
- SAND Bridge Exploit: The Sandbox Isolates Base and BNB Chain After Unbacked Token Mint — Cryptorank · August 22, 2026
- Web3 gaming network Sandbox stops Base and BNB chain bridging after exploit — Cryptonews · August 22, 2026