BTC $80,818.10 +1.23%
ETH $2,354.52 +1.69%
BNB $744.06 +0.53%
XRP $1.34 +2.77%
SOL $101.52 +1.28%
TRX $0.3306 +0.47%
DOGE $0.0790 +2.13%
ADA $0.2065 +1.21%
BCH $293.48 +4.65%
LINK $11.68 +3.34%
HYPE $81.56 +4.79%
AAVE $134.60 +1.23%
SUI $0.9348 +2.72%
XLM $0.1718 +2.03%
ZEC $1,309.96 +7.12%
AAPL $346.97 +0.93%
AMZN $253.91 +1.75%
GOOGL $326.43 +2.36%
MSFT $531.04 -0.22%
META $620.75 -2.07%
NVDA $218.37 +0.89%
TSLA $407.81 +3.68%
SNDK $1,343.89 +5.78%
INTC $94.65 +4.15%
SPCX $149.49 +1.17%
MU $958.11 +4.53%
AMD $567.40 +6.44%
BTC $80,818.10 +1.23%
ETH $2,354.52 +1.69%
BNB $744.06 +0.53%
XRP $1.34 +2.77%
SOL $101.52 +1.28%
TRX $0.3306 +0.47%
DOGE $0.0790 +2.13%
ADA $0.2065 +1.21%
BCH $293.48 +4.65%
LINK $11.68 +3.34%
HYPE $81.56 +4.79%
AAVE $134.60 +1.23%
SUI $0.9348 +2.72%
XLM $0.1718 +2.03%
ZEC $1,309.96 +7.12%
AAPL $346.97 +0.93%
AMZN $253.91 +1.75%
GOOGL $326.43 +2.36%
MSFT $531.04 -0.22%
META $620.75 -2.07%
NVDA $218.37 +0.89%
TSLA $407.81 +3.68%
SNDK $1,343.89 +5.78%
INTC $94.65 +4.15%
SPCX $149.49 +1.17%
MU $958.11 +4.53%
AMD $567.40 +6.44%

gang

All
Article
Flash

Ledger: Criminal gangs spent millions of dollars to carry out hardware implant attacks, which are part of local distribution channel attacks

Ledger released a report on the investigation of hardware implant attacks, stating that a highly organized criminal gang purchased genuine Ledger devices over several months, disassembled them, and implanted custom hidden components to steal users' recovery phrases when initializing the devices. They then resold the devices through Southeast Asian distributor channels.The attackers invested millions of dollars to build infrastructure for collecting recovery phrases, asset transfers, and money laundering, coordinating actions to transfer victims' assets. Ledger emphasized that this incident was not caused by vulnerabilities in the chip, operating system, or servers, but rather a localized distribution channel attack that occurred after the devices left the company's control. Currently, Ledger has requested authorized distributors and resellers in Southeast Asia and Hong Kong to suspend sales and conduct random checks on inventory and retail channel devices, finding no other tampered devices.Additionally, Ledger has requested authorized distributors not to resell any returned devices, even if the packaging is intact; they have also immediately prohibited displaying products on shelves or in display areas, requiring devices to be stored at the back of the store and delivered upon purchase. The company is working with law enforcement and the security community to track the stolen funds and will disclose more technical details in the future.

first_img Ukrainian police dismantled a gang in Kyiv that stole cryptocurrency wallets, with a monthly turnover reaching up to 1 million USD

On Tuesday, the Ukrainian National Police and Security Service announced the dismantling of a fake investment platform network based in Kyiv. This gang stole cryptocurrency from users in over 20 countries through built-in wallet theft tools. Investigators have currently confirmed 62 victims, including citizens from Germany, Poland, Lithuania, Latvia, Spain, France, the UK, Canada, and Israel. The organizers recruited more than 46 Ukrainians, operating multiple offices in Kyiv and surrounding areas, where developers were responsible for building the fake platform and resisting bans, while other members handled customer service and security.According to the Ukrainian Security Service, the organizer is a 25-year-old IT expert, and the gang's peak monthly revenue reached up to $1 million. The scam began with advertisements for cryptocurrency investment projects on Telegram. After users registered, they connected their wallets and invested funds, while gang members manually forged transactions to show a continuously increasing balance in the user backend. When users requested withdrawals, the platform required them to connect their main wallet and approve a small "test" transaction under the pretext of verification. This authorization immediately triggered the built-in theft tool on the website, transferring assets to wallets controlled by the gang and locking the victims' accounts.Investigators tracked down server equipment storing the gang's database in the Netherlands, which recorded victim information, wallet addresses, stolen amounts, internal communications, and platform operation data, as well as user passports, phone numbers, emails, login passwords, and photos. Police executed 34 searches in Kyiv and surrounding areas, seizing over 100 computers, more than 100 mobile phones, 79 SIM cards, one GSM gateway, cash, and 15 vehicles.

Shanghai police in China have arrested a gang engaged in cross-border illegal operations of virtual currency through a self-built platform, involving 200 million yuan

The Public Security Bureau of Hongkou District, Shanghai, China, recently solved a case involving cross-border illegal settlement and illegal foreign exchange trading using virtual currency, arresting 9 criminal suspects and involving an amount of over 200 million yuan. The suspects, including a person named Li, established a technology company at the beginning of 2024 to seek illegal profits, building two platforms online: "Cross-Border Fund Exchange" and "Virtual Credit Card Issuance and Settlement." They solicited customers both online and offline, illegally conducting exchange and settlement services for virtual currency and cross-border funds, profiting through transaction fees, service fees, card issuance fees, withdrawal fees, and other means.Investigators stated, "The uniqueness of this case lies in the fact that the criminals developed two apps and publicly solicited customers on such a large scale, which has never been seen before. The platforms built in this case are themselves a closed-loop illegal financial service system, with all transactions settled internally on the platform. This mode of crime has a higher degree of scale, a longer chain, and is more deceptive." Reports indicate that on the "Cross-Border Fund Exchange" platform, the criminal gang collected customers' virtual currency overseas and exchanged it for foreign currency, forming a "fund pool," and then realized cross-border settlement through fabricated contracts, achieving the exchange and transfer of virtual currency to RMB. On the "Virtual Credit Card Issuance and Settlement" platform, the criminal gang "cooperated" with several overseas private banks to issue virtual credit cards to customers, who could use the card for consumption, but the repayment process had to be settled in virtual currency; the gang exchanged virtual currency for foreign currency overseas, relying on false cross-border settlements to complete clearing with overseas card merchants.

The police in Zhanjiang, China, dismantled a virtual currency "score running" money laundering gang, and 16 people were criminally detained

Recently, the public security agencies of Zhanjiang and Leizhou in Guangdong, China, launched a concentrated crackdown operation, successfully dismantling a money laundering criminal gang that used virtual currency transactions to transfer funds from telecom network fraud. Sixteen members were criminally detained in accordance with the law.The gang, led by a couple named He and Zhang, began laundering and transferring fraudulently obtained funds through virtual currency trading models since the end of 2025. They illegally profited by earning transaction price differences and amassed a large number of personal bank cards, WeChat, Alipay, and other payment accounts to build a money laundering chain. In the early hours of July 24, the police conducted a precise cross-regional operation, dismantling the entire gang. The Zhanjiang Public Security Bureau solemnly reminds that "score running" money laundering is an important accomplice in telecom network fraud. Involved individuals will be charged based on the severity of their actions, suspected of aiding information network criminal activities, concealing and disguising criminal proceeds, and crimes related to the benefits of criminal proceeds.Citizens are strongly advised not to rent, lend, or sell personal bank cards and various payment accounts for the sake of small commissions. They must resolutely avoid participating in illegal activities such as virtual currency fund transfers and money laundering. Everyone should consciously protect their personal credit and property safety and actively stay away from all types of fraud-related criminal activities.

ZachXBT: Indian scam gang suspected of social engineering to steal coins and self-reported to the police to trace and freeze funds

"On-chain detective" ZachXBT published a case analysis stating that in a cryptocurrency asset case involving an Indian scam gang, the relevant individuals reported the case to law enforcement after their assets were frozen, drawing attention. The incident began when a user sought help, claiming that approximately 5.73 BTC (about $475,000) was frozen on Changelly in March 2025.Subsequent on-chain analysis revealed that these funds could be traced back to multiple social engineering attacks and theft cases related to Bitcoin ATMs targeting U.S. users, with a total amount involved exceeding $1 million and several elderly victims. The investigation showed that the individual provided multiple changing explanations for the source of the funds, including "loan," "boss transfer," and "investment from 2014-2015," and there were significant contradictions in the evidence chain.More concerning is that this user had previously filed a police report in India in December 2025, attempting to recover the frozen funds (case number 3207-P/2025). Subsequent on-chain evidence collection and email data analysis indicated that they might be a "mule" for transferring funds, with some bank documents inconsistent with their identity information. ZachXBT noted that such cases demonstrate that social engineering attacks and cross-border fund transfers continue to occur and remind users to avoid interacting with funds from suspicious sources to prevent triggering compliance freezes or legal risks.
app_icon
ChainCatcher Building the Web3 world with innovations.