jack

Сообщение ChainCatcher, согласно отчету IT Дом, Интерпол (INTERPOL) опубликовал результаты новой антикриминальной операции "Jackal IV", которая продлится с ноября 2025 года по июнь 2026 года и охватит 22 страны и региона мира, сосредоточив внимание на борьбе с мошенничеством в сфере знакомств, мошенничеством с криптовалютами и инвестициями, мошенничеством по электронной почте и отмыванием денег. В ходе этой операции было арестовано 58 человек, и установлены личности 263 подозреваемых.В частности, полиция Аргентины обнаружила сеть "преступление как услуга" (Crime-as-a-Service, CaaS), предоставляющую услуги по регистрации доменных имен и отмыванию денег, арестовав 17 человек и установив личности 196 подозреваемых. Полиция Южноафриканской Республики провела обыски в 7 местах в Йоханнесбурге, арестовав 39 подозреваемых в мошенничестве с любовными отношениями и инвестициями, направленным против пенсионеров из англоязычных стран, а также изъяла 2,67 миллиона долларов и заморозила 257 банковских счетов.Кроме того, полиция Италии подтвердила задержание одного подозреваемого, связанного с сетью отмывания денег по всей Европе, обнаружив, что его банковский счет был вовлечен в отмывание средств на сумму 845 тысяч евро; полиция Румынии ликвидировала группу инвестиционных мошенников, арестовав 11 человек и изъяв наличные, криптовалюту и другие незаконные активы.

Сообщение ChainCatcher, главный аналитик Bitget CFD Льюис Хуан в прямом эфире заявил, что на этой неделе данные PCE в США и глобальная конференция центральных банков в Джексон-Хоул станут центром внимания рынка. Рынок интересует не только то, изменит ли Федеральная резервная система процентные ставки, но и то, как она будет реагировать на инфляцию, которая продолжает превышать целевой уровень в 2%, высокие доходности долгосрочных государственных облигаций и финансовое давление.Льюис Хуан отметил, что если базовый PCE превысит ожидания, и Федеральная резервная система даст сигнал о сохранении жесткой политики или подчеркивании борьбы с инфляцией, доходности государственных облигаций США и доллар могут получить поддержку, в то время как золото и Nasdaq 100, чувствительные к процентным ставкам, могут оказаться под давлением. Напротив, если данные по инфляции покажут снижение, а чиновники выскажутся в пользу сохранения гибкости политики, рынок может вновь начать торговать будущим пространством для смягчения, что будет благоприятно для золота, валют развивающихся стран и акций роста. Данные PCE в этот раз в основном соответствуют ожиданиям, и акцент рынка также сместился на глобальную конференцию центральных банков в Джексон-Хоул.Кроме того, ситуация на Ближнем Востоке и риски в Ормузском проливе все еще могут способствовать росту цен на нефть и инфляционные ожидания. Трейдерам стоит обратить внимание на индекс доллара, доходности 2-летних и 10-летних государственных облигаций США, а также на взаимосвязь золота и нефти; после публикации значительных данных следует дождаться дальнейшего подтверждения направления рынка, чтобы избежать использования высокого плеча для преследования первой волны движения.

Сообщение от ChainCatcher, что Strike, основанная Джеком Маллерсом, запускает новый продукт по ипотечному кредитованию биткойнов, нацеленный на предотвращение принудительной ликвидации из-за падения цен на BTC. Strike заявляет, что, пока заемщик вовремя погашает кредит, заложенные BTC не будут перемещены или ликвидированы, независимо от того, насколько сильно упадет цена биткойна.Маллерс заявил на X, что у этого продукта нет требований по дополнительному обеспечению, и нет механизма ликвидации, основанного на цене; пользователи могут занимать доллары, продолжая держать биткойны. Он отметил, что колебания неизбежны, но ликвидация не является обязательной. Strike сообщает, что новый кредитный продукт отменяет действия, связанные с триггером цены, привязанным к коэффициенту кредитования (LTV), поэтому заемщики не должны беспокоиться о том, что падение цены BTC приведет к автоматической ликвидации. Пока проценты и платежи по сроку остаются нормальными, залог останется неизменным.

According to Cointelegraph, Bitcoin journalist Joe Nakamoto stated that approximately 70% of violent kidnapping incidents (wrench attacks) targeting cryptocurrency holders and their families occur in France. Since 2026, there have been 41 cryptocurrency-related kidnappings in France, averaging one every two and a half days.Nakamoto attributes this to the centralized storage of KYC (Know Your Customer) data. In the 2020 data breach incident involving hardware wallet manufacturer Ledger, the personal information, home addresses, and emails of over 270,000 users were exposed, providing criminals with precise attack targets. Casa CEO Jameson Lopp stated, "France is the canary in the coal mine, revealing how the surveillance system built by financial regulation can directly harm Bitcoin holders."In response to such threats, industry experts recommend that holders use custodial services with security features that can trigger asset freezes and notify law enforcement in the event of an attack; they also suggest preparing a "decoy" wallet with a small amount of funds and maintaining a low profile in public to avoid exposing holding information.

Democratic Senator Jack Reed stated at the CLARITY bill hearing that Iran is using cryptocurrency to procure sensitive goods, and the drones they are acquiring are wreaking havoc in the Persian Gulf. Moreover, most of this funding has turned into stablecoins. If we truly support our military, we should cut off their (Iran's) funding sources.

CoW DAO announced that its domain registrar was subjected to a social engineering attack on April 14, during which the attacker briefly controlled the official domain for about 4.5 hours and directed users to a phishing website, thereby inducing them to sign malicious transactions. The project team emphasized that the CoW Protocol itself was not compromised, but some user assets were affected during that time window.In response to this incident, the CoW DAO community governance proposal CIP-86 has been approved, establishing a discretionary compensation fund to reimburse affected users for their losses. The official reminder states that eligible users must submit their claims by May 14, including affected wallet addresses, asset information, transaction hashes, and names, and apply via email at help@cow.fi, with the email subject clearly stating "Discretionary Grant Claim for".

According to The Bitcoin Historian, billionaire Jack Dorsey's cryptocurrency financial application platform Cash App officially launched its Bitcoin reserve proof feature this week, verifying that over 60 million users' Bitcoin holdings on its platform are fully backed 1:1.The market views this move as an important step for the cryptocurrency industry in terms of transparency, user trust, and self-custody standards, and it is also seen as a positive signal for promoting the long-term healthy development of the industry.

According to The Block, the Ethereum Name Service (ENS) gateway eth.limo experienced a DNS hijacking attack last Friday evening. The project released a post-incident analysis report on Saturday, tracing the attack back to a social engineering attack against the domain registrar EasyDNS.eth.limo stated that DNSSEC validation rejected the attackers' domain server changes, and no users have been found to be actually affected. In response to the recent breaches at the DNS level affecting crypto frontends, eth.limo plans to migrate to EasyDNS's stricter security services, which no longer support account recovery features.EasyDNS CEO Mark Jeftovic has publicly acknowledged the vulnerability, stating that this is the first successful social engineering attack against customers in its 28-year history.

Twitter co-founder Jack Dorsey's Bitcoin at Block will launch a free Bitcoin faucet, marking the return of Bitcoin faucets after 16 years. Jack Dorsey has disclosed the faucet site "btc.day" on the X platform.It is reported that the total distribution pool is approximately 1 million USD equivalent in BTC (about 15 BTC), funded by the Bitcoin treasury of Jack Dorsey's Block company.

According to a warning from on-chain detective ZachXBT, the Discord link for Trust Wallet (discord[.]gg/trustwallet) has been hijacked by hackers and currently points to a phishing server.ZachXBT reminds users not to join through the Discord link in official channels such as the official website, Telegram, or blog to avoid asset loss.

DeFi project Steakhouse Financial disclosed yesterday that it encountered a phone social engineering attack targeting OVH Cloud, where the attacker changed the DNS A records of the main site and app subdomains to point to a malicious IP, and attempted to initiate a 5-day domain transfer. The related changes have been revoked, the DNS records have been cleared, and they are working with OVH to resolve the issue. All vaults and contracts were unaffected, depositor funds are safe, and no other service accounts were compromised. Please do not interact with the official website and emails until the issue is resolved; a detailed post-incident report will be released as soon as possible.Early this morning, Steakhouse Financial stated that during the period when the official website domain DNS records were cleared, the vault could still be accessed directly through Morpho, and all functions such as deposits and withdrawals were operating normally. Confirmation will be provided once the front end is restored.

According to CoinDesk, Square, led by Jack Dorsey, has begun automatically enabling Bitcoin payment features for millions of U.S. merchants, with transactions instantly converted to dollars at checkout. Merchants can receive Bitcoin without additional setup and do not bear the risks of price volatility and custody.This feature includes near-instant settlement and waives processing fees until 2026. Square stated that this is an important step in integrating Bitcoin into everyday business, with merchants defaulting to receive dollars without needing to change their accounting practices or hold crypto assets. It is reported that 78% of Square's users are from the U.S., while 22% are from international markets. Previously, PayPal launched the dollar-pegged stablecoin PYUSD to tens of thousands of users across its 70 global markets, promoting digital payment applications.

Hackers have launched Android malware attacks in Brazil by spoofing a phishing page that mimics the Google Play Store. Currently, all known victims are located in Brazil.The attackers set up a phishing website that closely resembles Google Play, enticing users to download a fake application called "INSS Reembolso." Once installed, the application releases hidden malicious code in stages and loads it directly into memory, leaving no visible files on the device, which makes it highly stealthy. One of the core functions of the malware is cryptocurrency mining, with an embedded XMRig mining program compiled for ARM devices that silently connects to the attacker's controlled mining server in the background. The program monitors battery level, temperature, and device usage status, dynamically adjusting mining behavior to evade detection, and bypasses Android's background process management mechanism by looping silent audio files.Some variants also include banking trojans that can overlay fake pages on the USDT transfer interface of Binance and Trust Wallet, silently replacing the recipient address. Additionally, the malware supports various remote control commands such as recording, screenshotting, keylogging, and remote locking of the device.

According to DL News, police in the Île-de-France region of France arrested two teenagers (aged 15 and 17) and a 35-year-old man, all suspected of carrying out two armed kidnappings targeting cryptocurrency holders on March 10 in the Île-de-France region.Reports indicate that the first incident occurred in the Essonne department in the southern suburbs of Paris, where the suspects, wearing masks and carrying small explosive devices, attempted to break into the home of a cryptocurrency holder but failed. About 30 minutes later, another incident took place in the Seine-et-Marne department, where the suspects successfully broke into the home of a female cryptocurrency holder, kidnapped her family, and stole jewelry; it has not been disclosed whether cryptocurrency assets were also stolen.The police subsequently tracked the suspects' vehicle, deploying about 100 armed special police officers and two police helicopters to pursue them, intercepting the vehicle after approximately 6 hours and discovering the stolen jewelry inside. Prosecutors have charged the three individuals with extortion, organized crime, armed robbery, property damage, and kidnapping. Currently, the 17-year-old suspect and the 35-year-old man are in custody awaiting trial, while the 15-year-old suspect is under judicial supervision, and prosecutors have appealed this decision.

Letsbonk.Fun founder Tom issued an urgent warning that the project's domain name has currently been hijacked by hackers. The hackers implanted an asset theft program (Drainer) at the domain level by controlling a team member's account. Tom advises all users not to visit or use any bonkfun-related domains until further notice to prevent asset loss.

The cybersecurity agency Moonlock Lab reports that crypto hackers have recently upgraded their "ClickFix" attack method, beginning to impersonate venture capital firms to contact target users through social platforms and lure them into executing malicious code to steal crypto assets.Attackers disguise themselves as fake venture capital firms such as SolidBit, MegaBit, and Lumax Capital, sending collaboration invitations via LinkedIn and guiding victims to fake Zoom or Google Meet meeting links. The pages embed a fake Cloudflare "I am not a robot" verification button, which, when clicked, copies malicious commands to the clipboard and tricks users into pasting and executing them in the terminal, thus completing the attack. Researchers point out that this method circumvents traditional security mechanisms by "making victims execute commands themselves."Meanwhile, hackers are also hijacking browser extensions to carry out attacks. John Tuckner, founder of cybersecurity company Annex Security, revealed that the Chrome extension QuickLens, after changing ownership on February 1, released a new version containing malicious scripts two weeks later, triggering ClickFix attacks and stealing user data. The extension had about 7,000 users and has since been removed from the store. Reports indicate that the hijacked extension scans crypto wallet data and mnemonic phrases, and scrapes Gmail content, YouTube channel data, and web login or payment information.

According to Cointelegraph, hackers are using the "ClickFix" attack method to steal cryptocurrencies, with the latest two attacks involving impersonating venture capital firms and hijacking browser extensions.Cybersecurity company Moonlock Lab reports that scammers impersonate fake VCs such as SolidBit, MegaBit, and Lumax Capital, contacting users via LinkedIn to offer collaboration opportunities, then directing them to click on fake Zoom and Google Meet links. After clicking the link, users are led to a page with a forged Cloudflare "I'm not a robot" verification box; clicking this box copies malicious commands to the clipboard and prompts users to open a terminal to paste the so-called verification code, thus executing the attack.Moonlock Lab points out that this method turns victims into execution mechanisms, bypassing defenses in the security industry. Meanwhile, hackers are also spreading malware by hijacking the Chrome extension QuickLens. This extension allows users to run Google Lens searches directly in the browser, and after ownership was transferred, the new version contains malicious scripts that can initiate ClickFix attacks and steal information.The extension has about 7,000 users, and once hijacked, it searches for cryptocurrency wallet data and recovery phrases to steal funds, as well as scraping Gmail inbox content, YouTube channel data, and login credentials or payment information entered in web forms. The extension has been removed from the Chrome Web Store. The ClickFix technique has been popular among hackers since last year, forcing victims to manually execute malicious payloads, affecting thousands of businesses and multiple industries worldwide.

In response to the community's statement that "the main reason for Block's layoffs is the over-hiring and mismanagement during the COVID-19 pandemic," former Twitter founder Jack Dorsey posted on the X platform, stating, "Yes, we over-hired due to mistakenly establishing two separate company structures (Square and Cash App) during the pandemic, but this issue has been corrected by mid-2024.However, this does not cover all the complexities we face in lending, banking, and BNPL. Our current goal is to achieve a gross profit of over $2 million per person, reaching four times the efficiency of pre-pandemic levels, which has remained at about $500,000 from 2019 to 2024. In fact, we operate a more efficient company than most."

The RWA tokenization platform OpenEden announced on X platform that it has fully restored DNS control over its official domain and its subdomains, and platform operations have returned to normal.OpenEden stated that its official website experienced unauthorized record modifications at the DNS level, leading to domain hijacking. After a joint investigation with security partners and infrastructure service providers, it was confirmed that this incident did not affect any smart contracts, internal systems were not compromised, core applications remain intact, and reserve assets were also unaffected. All reserve assets can be independently verified through Chainlink's Proof of Reserve, and measures to enhance domain and infrastructure security will be strengthened.