WhiteBIT released a report saying that social engineering scams remain the top threat to crypto users. The report shows that 40.8% of crypto security incidents this year involved scammers tricking victims through fake investment opportunities or impersonation. Technical wallet attacks (such as phishing, malicious software or keyloggers) accounted for 33.7%.
According to Bloomberg, Binance and Kraken suffered a similar social engineering attack to Coinbase, but the two exchanges successfully defended against the breach of customer data. According to sources, the hackers had bribed Binance customer service staff and directed them to contact the designated Telegram account, while Binance detected and blocked potential bribery conversations through an AI system.
According to TechCrunch, the "Lazarus Group", a North Korean hacking group, extended social engineering attacks to multinational IT companies to steal cryptocurrencies. The study found that the "Sapphire Sleet" and "Ruby Sleet" groups spread malicious software through fake recruitment and infiltrated to steal secrets, respectively. North Korean IT personnel also used false identities and technical means to infiltrate.