Hardware wallet maker Trezor disclosed that attackers compromised its third-party email service provider, enabling them to send phishing emails from Trezor's legitimate domain. The fraudulent emails falsely claimed a security flaw in STM32 hardware had weakened recovery phrases on some devices.
A Hyperliquid user lost approximately $550,000 in USDC on August 13 after clicking on a fraudulent Google search advertisement that led to a phishing website. The incident was identified by FlashRescue, with funds transferred to three attacker addresses.
North Korea's state-backed hacking group Kimsuky has built large language model tools designed to automate cyberattacks, analyze stolen material, and produce more convincing phishing campaigns, according to a report by South Korean cybersecurity firm Genians. The group is experimenting with local AI models including transcription capabilities for stolen calls and meetings.
North Korea-linked hacking group Kimsuky has developed three local AI environments and large language model tools to help automate cyberattacks, analyze stolen material, and create more convincing phishing campaigns targeting cryptocurrency and financial companies, according to a South Korean cybersecurity firm.
Dozens of cryptocurrency investors lost millions of XRP tokens after being duped by a fraudulent website impersonating the Flare Network. Seoul police are investigating the scam, with losses potentially continuing to rise.
AegisAI, a cybersecurity startup founded by former Google security executives, has raised $36 million to scale its AI-agent email security platform, which the company says analyzes messages like a human analyst and detects threats that traditional filters may miss. According to an AegisAI study cited by SiliconANGLE, AI-generated spear-phishing increased from 2.8% of the phishing emails the company observed in early 2025 to 13.9% by the end of the year.
