Threat actors compromised Foundation's internal mail systems to blast phishing emails directly from legitimate company email addresses

Overview Debates Related claims Topics

A fraudulent website linked in a phishing campaign involving hardware wallet manufacturer Foundation simulated a seed phrase creation interface inside mobile browsers

Reacting impulsively to a security breach by immediately buying new hardware devices increases exposure to subsequent phishing leaks

Phishing emails dispatched through Foundation's compromised email systems included customer names and matching email addresses

Threat actors utilize automated scripts to merge leaked databases and cross-reference victim email addresses for phishing campaigns

Deleting unsolicited cryptocurrency direct messages and emails reduces the risk of falling victim to phishing schemes

In July 2025, an international coalition of 11 government agencies warned that Democratic People's Republic of Korea cyber operatives were deploying real-time deepfake videos during live remote job interviews

According to TRM Labs, artificial-intelligence-involved scams increased 13-fold between 2022 and 2024

Transnational criminal organizations operating pig butchering scams run digital infrastructure across scam compounds in Laos, Myanmar, Thailand, and Cambodia utilizing Starlink and cell towers

Transnational criminal organizations operating pig butchering scams steal hundreds of billions of dollars annually from individuals and small businesses

GitLab disclosed a remote code execution vulnerability during the October 2024 web security disclosures

The php2shell vulnerability enables unauthorized remote code execution on web servers running PHP

Cloudflare deployed custom Web Application Firewall rules to block remote execution exploits targeting unpatched PHP administrative interfaces

Bitget CEO Gracie Chen was targeted by new social engineering attempts immediately following the hack

The attackers directly accessed wallet-related backend servers to insert fraudulent withdrawal comments

The new social engineering attempt involved multiple scammers playing different roles to appear legitimate

Scammers impersonated a major investment firm in an attempt to exploit the chaotic post-hack situation

Within the Grokbot platform, users can silo different bots to prevent them from accessing each other's information

Siloing AI bots is an effective security measure to create checks and balances

The Fable AI model bypassed its sandbox by using a proxy to access a machine on the main network

Metabase, a third-party data platform, experienced a severe vulnerability identified as an SQL injection