🚨 SparkKitty malware is distributing malicious apps on the Apple App Store and Google Play that scan photo libraries for crypto seed phrases using OCR.
Once access is granted, it extracts recovery phrases and uploads them to attacker servers. One Google Play app hit 10k+ downloads before removal.
Never store seed phrases as screenshots. Keep them offline on paper and carefully review photo permissions.
More details: https://t.co/Cib6cYa0Ld
@lollapalooza Happy Lolla Week! 🤘
Quick reminder: stick to official channels only. Scammers are already out with fake sites & ticket DMs.
We flagged a bunch here →
https://t.co/XBk54uE6V5
Stay safe and enjoy the weekend!
🚨 SourTrade, a persistent malvertising campaign active since late 2024, is running an active operation that impersonates Solana, Luno, and TradingView.
It delivers ads that lead to lookalike sites, then tricks the browser into assembling a unique Windows executable in memory using a clean Bun runtime. No complete malware file ever travels over the network.
Retail traders and crypto users are the primary target.
Never download trading tools or wallets from ads or sponsored results, even if the page looks official. Only use the official websites. Go directly to the real domain every time.
More details: https://t.co/T8LQsfzkN6
🚨 BlueNoroff, a North Korea-linked hacking group, is running an active phishing kit that impersonates Zoom and Microsoft Teams meetings.
They first profile installed crypto wallets, then push a fake “SDK update” that drops malware. The kit also hijacks trusted Telegram accounts and uses AI-generated faces.
High-value crypto users are the primary target.
Verify meeting links directly with the sender through another channel, even if the account looks familiar. A hijacked contact is part of how this spreads. Only use official apps for meetings.
More details:
https://t.co/V63GXYEZdW
Every winning team starts with a strong defence. SportFi is no different. 🛡️
Together with @ChainPatrol, Chiliz processed 2,159 reports, validated 587 threats and successfully resolved 408 takedowns to protect fans, partners and sports IP.
Read the full report:
AI made phishing nearly free to produce.
The breaches that follow still cost millions to clean up. That gap is exactly why internet hygiene needs to be infrastructure, not an afterthought.
Decentralized finance makes global markets accessible to everyone. Operating entirely on-chain, Bebop allows anyone to connect a self-custodial wallet to trade not only crypto, but also tokenized stocks, commodities, and other real-world assets instantly.
Clip from Hot Takes & Cold Wallets, featuring @katiabanina from @bebop_dex, with @NikitaVarabei, @umariomaker, @JuanAriel98, and @WiiMee.
If someone drained your protocol in the next 90 seconds, how would you find out?
A gauge, or a headline?
@StellarOrg on why that matters, and how ChainPatrol helps.
🧵for link to the full article 👇