2018-09
The WaveString case involved Lazarus-linked supply-chain activity around the Coinis cryptocurrency trading platform and the fake software company Celas. Kaspersky reporting described attackers stealing a code-signing certificate and using it to sign malwa…
🇰🇷 Korea, Republic of
#Cryptocurrency
#SupplyChain
2018-09
Zaif, a Japan-based cryptocurrency exchange, reported unauthorized external access to hot-wallet management servers on September 14, 2018, resulting in theft of BTC, MONA, and BCH from customer and exchange assets. Linked reporting describes service suspe…
🇯🇵 Japan
#Cryptocurrency
#FinancialGain
2018-08
Ryuk emerged as a targeted ransomware operation against enterprises, with operators using prior network access, credential collection, lateral movement, and hands-on deployment to encrypt critical systems and disrupt organizations in sectors including gov…
🇺🇸 United States, ZZZ
#FinancialGain
2018-08
Cosmos Bank suffered an August 2018 financial intrusion combining ATM cash-out and SWIFT abuse, with linked reporting describing compromise of ATM/POS switch infrastructure, malicious ISO 8583 libraries, process injection, a parallel malicious switch, and…
🇮🇳 India
#Finance
#ATM
#SWIFT
#FinancialGain
2018-07
Bancor publicly acknowledged a July 2018 security breach, and later blockchain-tracing reporting observed more than 25,000 ETH stolen in the hack moving after months of inactivity through relay-wallet behavior toward exchange destinations. The linked evid…
🇨🇭 Switzerland
#Cryptocurrency
#FinancialGain
2018-07
RSupport disclosed that one internal PC showed signs of malware infection and that a code-signing certificate used for file integrity verification may have been exposed, prompting revocation, replacement, and security-hardening measures with KISA support.…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2018-07
UN Panel evidence lists Vietnam among suspected DPRK cyber attacks on financial institutions and records an attempted theft of more than EUR 1 million through fraudulent SWIFT messages reported by Tien Phong Bank. The case is part of the same bank-theft p…
🇻🇳 Viet Nam
#Finance
#FinancialGain
2018-06
Bithumb disclosed a June 2018 cryptocurrency theft initially estimated at about 35 billion KRW, with the exchange covering losses from company reserves while moving customer assets to cold wallets and suspending cryptocurrency and KRW withdrawals during c…
🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2018-06
Coinrail reported a June 2018 cryptocurrency exchange hack involving unauthorized withdrawals of several assets, including Pundi X, Aston, and NPER, with linked reporting estimating losses at about 40 billion KRW. The exchange moved roughly 70% of remaini…
🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2018-06
The Liberian Financial Institution incident is tracked in UN sanctions and financial-incident timeline reporting as part of a broader set of cyber-enabled thefts against financial institutions and cryptocurrency exchanges. The linked UN evidence attribute…
🇱🇷 Liberia
#Finance
#FinancialGain
2018-05
Taylor reported that attackers stole project funds after gaining access to a team device and taking control of a 1Password file, emphasizing that the incident was not a smart-contract exploit but an endpoint and credential-vault compromise. The theft incl…
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2018-05
Banco de Chile is tracked as a May 2018 Chilean financial-sector and SWIFT-related incident across financial-hack trend reporting and the UN Panel of Experts’ DPRK sanctions-evasion reporting. The linked UN evidence frames the wider set of bank and exchan…
🇨🇱 Chile
#Finance
#SWIFT
#FinancialGain
2018-05
The Sejong Institute incident was a South Korea-focused watering-hole operation against reunification, diplomacy, and security stakeholders, using an ActiveX vulnerability in AcubeFileCtrl.ocx before version 2.3.0.4 to download and execute malware. The in…
🇰🇷 Korea, Republic of
#Wateringhole
#Espionage
#Research
2018-05
Simplii is linked to NSHC’s SectorA01 custom proxy utility analysis, which describes continued attacks against financial-sector targets worldwide and cautions that attribution should be based on repeated TTP, protector, function, and algorithm comparisons…
🇨🇦 Canada
#Suspicious
#Finance
#FinancialGain
#DataBreach
2018-04
Gate.io was targeted in a cryptocurrency exchange supply-chain attack that reporting linked to remote access tooling and cryptocurrency theft, with later reporting describing North Korean hackers moving funds from the 2018 theft. The incident highlights t…
🇰🇾 Cayman Islands
#Cryptocurrency
#FinancialGain