Cyberattack

Nichirei

2026-07-16 03:53:51

Nichirei cyberattack disrupts supply to 5,000 downstream businesses in Japan

Nichirei Corporation, one of Japan’s largest frozen food suppliers, has been hit by a cyberattack that disrupted logistics operations and supply deliveries across parts of the country. The company said it detected abnormal external access to its servers on July 13 and responded by disconnecting networks and shutting down affected systems as a precaution. That move brought operations at Nichirei Logistics to a halt, leaving refrigerated warehouse functions and logistics management systems unable to run normally. Nichirei said there is currently no concrete evidence that customer or personal data was leaked, though forensic work and a broader security investigation are still underway. The company handles low-temperature cargo volumes of roughly 7,000 trucks a day, and the disruption has affected about 5,000 downstream partner businesses. The fallout has reached major restaurant and retail chains. KFC Japan said deliveries of key ingredients including chicken were disrupted, causing unstable supply and shortages at some stores. Kura Sushi said dozens of outlets in the Kansai region were seeing delays in sushi ingredients and frozen food deliveries. AEON reported large-scale shortages in frozen food and fresh food sections at some locations, while PPIH, the parent company of Don Don Donki, said some stores supplied through Nichirei Logistics were short on products. Nichirei said the impact is limited to Japan for now and that it will continue updating partners on recovery timing.

490

cyberattack

2026-07-09 06:36:59

Fake CAPTCHA Scam Evolves: Clipboard Command Injection Deploys Information-Stealing Malware

NJCCIC reveals a sophisticated attack using fake CAPTCHA pages that trick users into pasting malicious commands into Windows Run, silently deploying SectopRAT, Lumma, Vidar infostealers and rootkits via legitimate mshta.exe, targeting government employees and car dealership websites.

520

Radiant Capit

2026-07-08 17:46:15

Radiant Capital Hack Exposes How a Fake PDF Led to a $50 Million DeFi Theft

Radiant Capital’s incident shows how social engineering, malware, and manipulated multisig signing combined to enable a $50 million DeFi theft in minutes.

440

Lazarus

2026-07-08 14:34:15

Lazarus Deploys Mach-O Man Malware to Target macOS Crypto Executives and Developers

Security researchers say North Korea-linked Lazarus used a modular macOS malware kit called Mach-O Man to steal keychain data, browser credentials, and crypto account access through fake meeting invites and Terminal-based social engineering.

450

Lazarus

2026-07-08 14:34:15

Lazarus Unveils Mach-O Man Malware Targeting Mac Crypto Executives and Developers

Security researchers say North Korea-linked Lazarus is using a modular macOS malware kit called Mach-O Man to steal browser credentials, keychain data, and crypto access through fake meeting invitations and terminal-based social engineering.

470

Coinstats

2026-07-08 14:22:14

Coinstats Confirms Security Breach Affecting 1,590 Wallets, Temporarily Shuts Down App

Coinstats said a June 22 security breach affected about 1,590 wallets, or 1.3% of all Coinstats wallets. The company paused user activity, shut down the app, and urged impacted users to move funds immediately using exported private keys.

410

WazirX

2026-07-08 10:56:14

WazirX Nears Relaunch After Court-Approved Restructuring, but Crypto Withdrawals Remain Limited

WazirX is moving toward a phased recovery after its 2024 hack, with INR withdrawals partially restored and most crypto withdrawals still restricted as the exchange prepares for a relaunch under a court-approved restructuring plan.

350

Bitrefill

2026-07-04 03:30:14

Bitrefill Reveals Cyberattack, Hot Wallet Theft, and Indicators Tied to Lazarus

Crypto commerce platform Bitrefill disclosed that it suffered a cyberattack beginning on March 1, after a compromised employee laptop gave attackers access to legacy production credentials. The intruders escalated privileges across the company’s infrastructure, accessed parts of the internal database, and drained an undisclosed amount of cryptocurrency from certain hot wallets. They also abused Bitrefill’s gift card inventory systems to make suspicious purchases through vendors, suggesting the attackers were looking for directly monetizable assets rather than customer information alone. The company said about 18,500 purchase records were accessed, including email addresses, crypto payment addresses, IP metadata, and roughly 1,000 encrypted customer names that are being treated as potentially exposed because encryption keys may also have been accessed. Bitrefill stressed that it stores minimal personal data, does not require mandatory KYC for most transactions, and relies on external providers to handle any KYC-related information. Bitrefill linked the incident to North Korea-associated Lazarus Group based on malware similarities, reused infrastructure such as IPs and email accounts, and on-chain transaction patterns. Cybersecurity firms zeroShadow, SEAL911, and RecoverisTeam, along with on-chain analysts and law enforcement, helped investigate and respond. The incident highlights the continuing threat of state-linked cyber operations in crypto, especially as Chainalysis has estimated that North Korea-linked groups stole more than $2 billion in cryptocurrency in 2025 alone.

460