Every Zipp story tagged #SocialEngineering, newest first.
The attack shows how compromised media accounts and impersonated journalists can turn familiar interview workflows into a security risk for crypto executives.
The case highlights the growing cost of social-engineering attacks, where victims are persuaded to transfer funds before any official support channel is involved.
The case highlights how attackers can bypass platform security by persuading users to move funds themselves, then launder the cryptocurrency through a chain of conversions and cash-outs.
The case highlights how social engineering can put exchange customers at risk even when the attack targets people rather than Coinbase’s platform.
The case highlights how impersonation can turn a trusted exchange brand into a tool for stealing crypto, while the plea deal drew a shorter sentence than prosecutors sought.
The group targeted crypto-heavy customers using blockchain analysis, and 680 accounts had identity documents and transaction histories exposed in the breach.
A $245M laundering case against a 22-year-old says more about the threat model large Bitcoin holders still face than about any single bad actor: people, not protocols, remain the vulnerability.
The 4,100 BTC taken by impersonating Google and Gemini staff is one of the largest crypto thefts ever prosecuted on US soil, and the guilty plea resets the bar for social-engineering risk.
If accepted, Lam's plea would mark the 11th guilty plea among 18 defendants in a case prosecutors say netted over $240M in Bitcoin through social engineering, with sentencing guidelines pointing to…
Up to 10 million EU users were forced to find new platforms after July 1, and the gap between the 1,700 unlicensed venues that shut and the 323 MiCA-authorized firms is exactly where social engineers…
The case puts identity checks at the center of crypto security, where fundraising, recruiting and partnerships can become attack surfaces.
The DPRK has spent years turning remote crypto hiring into a sanctions-evasion pipeline, and documenting how the bait works is one of the only public defences the rest of the industry has.
Michael Coates, ex-Twitter and Mozilla security lead, says attackers are moving off smart contracts and onto people, with full spoofed voice calls as the near-term threat.
The letters mimic official IRS correspondence and direct recipients to a "Digital Asset Compliance Portal" that does not exist, part of a broader wave of social-engineering attempts targeting crypto…
The deleted post hit while Robinhood's new chain was already running hot: $700M+ in assets and 300K daily addresses, turning a single compromised tweet into an obvious target for scammers.
The fake "Vladhood" post exploited Tenev's reach to flog a token on the very chain his firm launched, underscoring how memecoin rails and high-profile social accounts remain a soft target.
The campaign abuses developer trust, posing as legitimate projects to slip infostealers past crypto investors who download what looks like routine open-source tooling.
Treasury's $10B scam warning and a new DeFi coalition show the industry is finally treating social engineering and state-linked hackers as the primary attack surface, not smart-contract bugs.
WuBlockchain
CryptoSlate
CoinDesk
Crypto News
TheBlock
CoinTelegraph