⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Illustration of an eye inside a camera frame

A North Korean hacking group called TraderTraitor stole more than $6 billion in cryptocurrency from the exchange Binance, marking the largest cryptocurrency theft in history according to the FBI. The theft surpassed a previous record of $1.46 billion stolen from Bybit in February 2025. The stolen funds were distributed across 11 blockchains, with the majority on Ethereum and Bitcoin. Several cryptocurrency companies including Tether and Circle have frozen approximately $2.85 billion of the stolen assets on blockchain networks.

Multiple significant cybersecurity incidents occurred this week affecting various sectors and platforms. A Chinese state-sponsored group called Volt Typhoon deployed an infrastructure system to conduct attacks on critical infrastructure while hiding its origin. ChatGPT users faced risks from shared links that could execute malicious code in authenticated sessions. A counterfeit version of the Claude Code extension distributed through a marketplace installed persistent backdoors on up to 5,000 systems. Additionally, a commercial Android spyware application called uCreator targeted users across China and Southeast Asia by cloning WeChat accounts and stealing credentials from mobile wallets and messaging applications.

Source: Read the full story at The Hacker News

This summary was written with AI assistance from the linked source.

Send this to yourself, or to someone who should see it

Enter your email and we will send you a link to this article.

We use your email only to send this link. It is not saved or added to any list.

Or share it