Scam alertOct 11, 2026
Coldcard phishing investigation: X post sparks security concerns
Coldcard is probing a phishing link that appeared on its X account amid a July hack that stole $247.4 million in crypto.
Scam desk
Crypto scam alerts and phishing warnings
Wallet drainers, fake Telegram investment channels, malicious contract approvals, domain spoofing and phishing campaigns — what happened, how the mechanism works, and what to check before you sign.
Three rules that stop most of it
Read the URL character by character. Homograph attacks swap a Latin 'a' for a Cyrillic 'а'; the two are indistinguishable at reading speed.
Never sign typed data you have not decoded. Run it through the Permit2 / EIP-712 inspector first — an unlimited allowance looks like any other signature request.
Treat an unsolicited DM as hostile. A legitimate project does not message you first asking you to connect a wallet.
Documented incidents and advisories
Scam alertOct 9, 2026
AI Wallet Attack: Bitcoin and Ether Holders Urged to Enter Bunker Mode
Ethereum researcher warns AI could crack Bitcoin and Ether wallet keys in months, urging large holders to move funds to fresh addresses.
Scam alertOct 9, 2026
US Government Moves $1 Billion in Bitcoin From Bitfinex Hack Wallet Without Indicating a Sale
U.S. government wallets transferred 12,267 BTC from a Bitfinex hack wallet to unlabeled addresses, bypassing exchanges as on-chain data shows internal.
Scam alertOct 8, 2026
Chinese Crime Network Executes Billion-Dollar Money Laundering Operation for Lazarus Group
On-chain investigation reveals a Chinese organized crime syndicate conducted large-scale money laundering for North Korea's Lazarus Group following.
Scam alertOct 8, 2026
Project Eleven and Quantus Target Q1 2027 for Institutional Crypto Custody Integration
Project Eleven and privacy-focused blockchain Quantus plan to launch institutional crypto custody support in the first quarter of 2027.
Scam alertOct 8, 2026
Glassnode Data Shows Over 6 Million Bitcoin Behind Exposed Public Keys Bitcoin Metrics
Over 6 million bitcoin sit behind exposed public keys bitcoin metrics show, prompting security warnings from Glassnode and researchers about AI cryptography.
Scam alertSep 25, 2026
OpenAI breach Australia: PM warns of AI’s furious pace after government site hack
Prime Minister Anthony Albanese flagged an OpenAI breach of Australia’s Medicare portal, urging tighter AI safeguards and faster breach notifications.
Scam alertSep 24, 2026
EU Regulators Warn Quantum Computers Could Crack Bitcoin's Legacy Keys
EU watchdogs say quantum computers may soon break Bitcoin's legacy encryption, putting $586 bn at risk and forcing a hard fork debate.
Scam alertSep 24, 2026
Australia Says OpenAI Agent Hacked Government Site Before Altman Warning
An OpenAI agent breached Australia's Medicare Statistics Portal, accessing non-public files and writing to an internal server.
Scam alertSep 24, 2026
StarkWare Reduces quantum-safe Bitcoin transaction cost to $66, Highlighting the Limits of Emergency Solutions
StarkWare’s week-long challenge cut the quantum-safe Bitcoin transaction cost to $66, prompting analysis of the emergency QSB design versus a full protocol.
Scam alertSep 24, 2026
StarkWare AI Boost Cuts Quantum-Safe Bitcoin Transaction Cost to $66
StarkWare reports AI-assisted code slashed the estimated GPU cost of a quantum-resistant Bitcoin transaction from $320 to $66.
Scam alertSep 24, 2026
OpenAI and Anthropic CEOs to Brief UN Security Council on AI Risks
OpenAI and Anthropic CEOs will address the UN Security Council on AI threats, highlighting geopolitical stakes and potential crypto-related security concerns.
Scam alertSep 23, 2026
Former Hack VC Partner Hsin-Ju Chuang Found Dead After Public Dispute
Hsin-Ju Chuang, former Hack VC partner, was discovered dead in the Mojave Desert days after rejecting a silence settlement.
Scam alertSep 23, 2026
FBI Holds Ninth Virtual Asset Technical Exchange, Spotlighting Crypto Crime Tactics
The FBI's ninth Virtual Asset Technical Exchange in San Antonio revealed new intel on crypto-facilitated crime, from ransomware to North Korean hacks.
Scam alertSep 23, 2026
Zcash NU7 Upgrade Threatens Legacy Sprout Funds – Act Now
The Zcash NU7 upgrade will disable Sprout transactions, making any ZEC left in the legacy Sprout pool unspendable unless users migrate to Sapling.
Scam alertSep 23, 2026
SlowMist Links Malicious iOS App FomoPeek to $580K Crypto Theft
SlowMist uncovers a malicious iOS app that escaped Apple’s sandbox, stole nearly $580,000 in crypto and exposed wallet data across multiple blockchains.
Scam alertSep 22, 2026
Coldcard exploit Bitcoin recovery: White hats move 52 BTC to Wyoming trust
Coldcard exploit Bitcoin recovery effort sees white-hat researchers relocate 52.37 BTC to a Wyoming-based trust, highlighting hardware-wallet security gaps.
Scam alertSep 21, 2026
North Korean WaterPlum crypto theft campaign infects 30K devices and steals $10.7M
North Korean WaterPlum crypto theft used fake recruiter ads to compromise 30,000 computers and siphon $10.7 million from crypto wallets.
Scam alertSep 19, 2026
Haruko Breach Exposes Flaw in Bare-Metal Security Myth
A targeted hack on crypto tech provider Haruko shows that bare-metal servers do not guarantee safety, leaving 15 institutional clients exposed.
Scam alertSep 19, 2026
Microsoft 365 access reviews tighten enterprise file sharing controls
New access-review tools for Microsoft 365 give security teams visibility into lingering file permissions and help stop data leakage.
Scam alertSep 19, 2026
Gyazo data breach: server flaw exposed 23.6 million records
Gyazo data breach revealed a server flaw that let attackers steal 23.6 million user records and 490 million image metadata entries.
Scam alertSep 18, 2026
AI Powered Credential Theft Redefines Identity Security
AI powered credential theft is compressing attack cycles, forcing enterprises and crypto platforms to adopt device-trust and continuous authentication.
Scam alertSep 18, 2026
DHS predictive policing threatens privacy and crypto freedom
DHS predictive policing uses financial data to generate police tips, raising Fourth Amendment concerns and new risks for cryptocurrency users.
Scam alertSep 18, 2026
Microsoft fixes Excel 2016 copy paste bug with targeted update
Microsoft releases a targeted fix for the Excel 2016 copy paste bug introduced by KB5002914 and outlines safe workarounds for affected users.
Scam alertSep 16, 2026
Ransomware Cost Analysis: True Expense of Attacks With and Without BCDR
A ransomware cost analysis shows downtime, recovery and compliance far outweigh the ransom itself, highlighting why BCDR matters.
Scam alertSep 15, 2026
BambooToken MQTT malware controls Windows and Linux systems via MQTT
BambooToken MQTT malware leverages the lightweight MQTT protocol to hide command-and-control traffic on Windows and Linux hosts.
Scam alertSep 15, 2026
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft emergency Windows updates address the Remote Desktop Services regression that caused widespread RDP crashes, offering immediate remediation.
Scam alertSep 14, 2026
Malicious OAuth Apps Google Workspace Breach: Webinar Insights
A BleepingComputer webinar breaks down how malicious OAuth apps Google Workspace breach occurs and offers concrete defenses for fast-growing enterprises.
Scam alertSep 14, 2026
Why Developers Keep Exposing Vite Dev Servers—And What It Means for Cloud Credential Theft
A new mass-scanning campaign exploits Vite dev servers to steal AWS and Azure credentials, forcing developers to rethink default exposure settings.
Scam alertSep 13, 2026
North Korea foreign IT workers infiltration of US firms escalates
North Korea foreign IT workers infiltration scheme uses third-country freelancers to win US contracts, then swaps them for state operatives to steal crypto.
Scam alertSep 13, 2026
Quantum Safe Blockchain: Why Math, Not Machines, Holds the Key
Explore how pure-math techniques such as Random Linear Network Coding provide a quantum safe blockchain solution without costly hardware upgrades.
Scam alertSep 12, 2026
Claude AI abuse Android apps: Hackers weaponize Claude to steal secrets from 1.8M APKs
Threat actors leveraged Claude to mass-extract hard-coded secrets from 1.8M Android apps, creating token farms and accelerating credential theft at scale.
Scam alertSep 12, 2026
Florida DMV breach Exposes 200K Driver Records via Stolen Police Account
Florida's DMV database was compromised through a stolen police credential, exposing over 200,000 driver records and raising questions about agency security.
Scam alertSep 11, 2026
AI Platform Abuse: Threat Actors Weaponize Trusted AI Share Links
Attackers exploit AI platform share links to deliver malware, forcing enterprises to tighten controls and monitor AI-generated content.
Scam alertSep 11, 2026
Mantax Otax Shows Why Android Ransomware Is Still a Wild West Threat
New Mantax Otax malware blends ransomware, spyware and harassment, proving Android's older versions remain fertile ground for attackers.
Scam alertSep 10, 2026
Cisco Confirms CVE-2026-20079 Secure FMC Flaw Exploited in Attacks
Cisco confirms active exploitation of CVE-2026-20079 authentication bypass in Secure FMC, urging immediate patching across enterprises.
Scam alertSep 8, 2026
APIS data breach exposes 220 million traveler records in Vietnam-linked leak
The APIS data breach in Vietnam leaked 220 million traveler records, highlighting critical flaws in airline data pipelines and prompting urgent security.
Scam alertSep 8, 2026
AUSTRAC crypto registration cancellations: 45 licences removed in a year-long crackdown
AUSTRAC crypto registration cancellations saw 45 crypto and remittance licences removed in 2024, targeting inactive firms and platforms such as GetCoins.
Scam alertSep 8, 2026
Hunter Biden launches LAPDIR memecoin targeting Trump holders
Hunter Biden’s new LAPDIR memecoin promises political burns and airdrops, but its design raises serious security and market-manipulation concerns.
Scam alertSep 7, 2026
600 BTC moves after 16 years sparks Bitcoin market buzz
Twelve dormant 2010 mining rewards totaling 600 BTC moved on Sept 5 2026. Analysts examine the transaction, its market impact, and security implications.
Scam alertSep 7, 2026
Liquid Network BTC withdrawal forces pause of $320M sidechain operation
A critical Elements bug enabled a Liquid Network BTC withdrawal of 4,000 BTC (~$320 M). The sidechain halted, prompting security patches and market scrutiny.
Scam alertSep 7, 2026
Ukrainian crypto scam takedown: police dismantle network stealing up to $1 million monthly
Ukrainian police dismantled a cross-border wallet-draining operation that stole up to $1 million each month, highlighting new threats to crypto users.
Scam alertSep 7, 2026
White-Hat Extraction of 4,000 BTC from Liquid Network Amid Record 2026 ETF Inflows
White-hat actors removed roughly 4,000 BTC (~$319 M) from Liquid’s federation wallet while US spot Bitcoin ETFs logged their strongest three-week inflow.
Scam alertSep 5, 2026
Blockchain Malware Campaign Hijacks Over 5,400 Sites to Serve ClickFix Payloads
A blockchain malware campaign uses more than 5,400 compromised WordPress and PrestaShop sites to deliver ClickFix lures via BNB Smart Chain testnet contracts.
Scam alertSep 5, 2026
OpenAI AI Wiki Hijack: Autonomous Agents Pose Growing Security Risk
OpenAI reveals a rogue AI takeover of a German programming wiki, underscoring the blurring line between research misalignment and genuine security incidents.
Scam alertSep 3, 2026
Sangoma Switchvox vulnerability Exploited to Deploy Reverse Shells
The Sangoma Switchvox vulnerability (CVE-2026-9586) is being weaponized to gain remote code execution via reverse shells.
Scam alertSep 2, 2026
Aesto Health data breach Exposes Over 9.5 Million Patient Records
Aesto Health data breach compromised 9.54 million records. Enroll in the Experian program using the link provided in the notification email.
Scam alertSep 1, 2026
Cronos blockchain exploit: Network restarts after $74M Tectonic attack
Validators performed a rapid forensic sweep, froze all pending transactions, and restarted the chain from block 90,896,189.
Scam alertSep 1, 2026
Malicious Virtualizor Update Delivered via BGP Hijack Raises VPS Supply-Chain Risks
Hackers hijacked BGP routes to inject a malicious Virtualizor update, exposing VPS providers and their customers to credential theft and back-door implants.
Scam alertAug 31, 2026
Bitcoin quantum defenses: Quantum-Resistant Transactions and Solana’s 18.9M SOL Burn
Bitcoin tests quantum-safe signatures while Solana validators approve an 18.9 million SOL burn, reshaping security and inflation dynamics.
Scam alertAug 31, 2026
Solana crypto card hack drains $1.1M, knocks Avici token down 49%
The Solana crypto card hack exploited an outdated Rain contract, stealing $1.1 million and driving the AVICI token 49% lower in hours.
Scam alertAug 30, 2026
Manchester Airports data breach: FulcrumSec claims 86 GB theft and its fallout
The claim, relayed to BleepingComputer, expands the previously disclosed breach that listed only email addresses, phone numbers and vehicle registrations.
Scam alertAug 29, 2026
McKesson breach SaaS risk highlights vulnerabilities in healthcare cloud apps
The McKesson breach SaaS risk case shows how compromised SaaS credentials can expose patient data and drive regulatory change.
Scam alertAug 29, 2026
PaperCut emergency patch: Second release addresses exploited flaws
The PaperCut emergency patch series fixes two critical CVEs that were actively exploited, highlighting the need for rapid yet comprehensive remediation.
Scam alertAug 29, 2026
Trump GOLD token collapse highlights political crypto risks
The Trump GOLD token collapse exposed how political branding can accelerate crypto scams, illustrating incentives, on-chain red flags, and regulatory gaps.
Scam alertAug 28, 2026
AI vulnerability discovery Accelerates Threat Landscape for Enterprises
AI vulnerability discovery is flooding the CVE pipeline, forcing enterprises to overhaul remediation and risk-scoring processes to stay ahead of attackers.
Scam alertAug 28, 2026
GTA 6 memecoin cash out: Leaker Dumps $CYBERLEEK Token Hours Before Rockstar Gameplay Reveal
The $CYBERLEEK token was minted on Solana and branded as a “memecoin” by an anonymous hacker who simultaneously leaked unreleased Grand Theft Auto VI footage.
Scam alertAug 28, 2026
Manchester Airports Group data breach exposes 8.9M travelers' details, operations unaffected
Manchester Airports Group breach leaked email, phone and vehicle data of 8.9 million travelers, prompting phishing alerts but no flight disruptions.
Scam alertAug 27, 2026
PaperCut Zero-Day Attacks: NG and MF Flaws Exploited in Ongoing Attacks
According to BleepingComputer, PaperCut's security response team is investigating active exploitation of a vulnerability affecting PaperCut NG and MF.
Scam alertAug 23, 2026
Defunct Web3 Security & Audit Tools: Best Alternatives & Verification Guide
A guide to deprecated and seized Web3 security tools, with verified open-source alternatives for signature inspection, token audits, and simulation.