Cosine: Ledger codebase attacker linked to Angel Drainer

On December 15th, SlowMist founder Yu Xian posted on social media that the group that poisoned Ledger Connect Kit yesterday is related to Angel Drainer (at least using this phishing tool). Through feature analysis with Scam Sniffer, they discovered thousands of phishing websites and synchronized them to the MetaMask eth-phishing-detect repository.
In addition, Angel Drainer has also started using smart contracts to manage the access domain names of malicious JS files.

Ledger

Comments

All Comments

Recommended for you

CointimeSG ·

Crypto Banking in the UAE: The Path to Licensing and Compliance

Companies must meet several financial and operational criteria, such as minimum capital requirements and maintaining liquid assets. The licensing process can take between 4 to 12 months and involves significant costs.
CointimeSG ·

Canadian wellness firm approves plan to add $1M of Bitcoin to treasury

Jiva Technologies CEO Lorne Rapkin said the move to add Bitcoin to the treasury is “a unique opportunity to strengthen our treasury with a resilient and innovative investment.”
CointimeSG ·

dxFeed Collaborates with Hybrid Trading Firm to Improve Market Data Access

The partnership involving Tickblaze aims to address high data fees and technical complexities. Tickblaze, originally focusing on institutional clients, has expanded its offerings to retail traders.
CointimeSG ·

Binance launching BFUSD, promising APY 'will never go below zero'

Binance is set to launch BFUSD, a “reward-bearing margin asset” offering passive rewards.
CointimeSG ·

Traders still riding on ‘hot altcoins’ despite Bitcoin pullback: Santiment

Sand, XLM and Ether are leading discussion topics among traders at the moment, according to data from analytics platform Santiment.
CointimeSG ·

Wall Street Bitcoin Miners Equipment Worth Millions Stranded as U.S. Tightens Screws

U.S. Customs is allegedly detaining the latest-model Bitmain Bitcoin mining equipment at multiple ports. Bitcoin mining firms from Wall Street face mounting storage fees and delays exceeding two months.
CointimeSG ·

Spot bitcoin ETFs end positive streak with $438 million outflows; BTC dips to $94,500

U.S. spot bitcoin ETFs reported a total daily outflow of $438 million on Monday.
CointimeSG ·

Wrapped Bitcoin in DeFi: Evaluating wBTC, cbBTC and tBTC

Explore how trade-offs between centralization, security, and adoption are shaping wrapped Bitcoin protocols.
Cosine: After a user used GPT to write a bot with a backdoor code, the private key was sent to a phishing website

SlowMist Yu Xian stated in a post on the X platform that a user used GPT to write a bot with code and sent the private key to a phishing website. The reason why the private key was stolen was because it was directly sent to the phishing website in the HTTP request body. Yu Xian reminded that when using LLM such as GPT/Claude, one must pay attention to the common fraudulent behavior of these LLM. It was previously mentioned that AI poisoning attacks were carried out, and now this is a real attack case targeting the crypto industry.
Polymarket Blocks French Users Amid Government Investigation into Gambling Law Compliance

Polymarket has blocked users from France following reports of an investigation by the country's gaming authority for compliance with gambling laws. The ban was not stated in Polymarket's terms of service, but French users attempting to access the website using a VPN from a French server were met with a digital blockade. The ANJ, France's national gaming authority, began investigating Polymarket after a French trader placed large bets on Donald Trump winning the 2024 US Presidential election.