Bitrefill2026-07-02 19:00:14Bitrefill Discloses Cyberattack: North Korea's Lazarus Group Suspected, 18,500 Purchase Records ExposedCrypto e-commerce platform Bitrefill disclosed a cyberattack on March 1, 2026, originating from a compromised employee laptop. Attackers extracted legacy production credentials, gaining access to hot wallets and gift card systems, stealing an undisclosed amount of funds and accessing about 18,500 purchase records (including 1,000 encrypted customer names potentially exposed). Multiple indicators point to North Korea's Lazarus Group, including malware similarities, infrastructure reuse, and on-chain transaction patterns. Bitrefill temporarily took systems offline, recovered services, and absorbed losses with operational capital. Affected users have been notified. The incident highlights ongoing state-sponsored cyber threats in the digital asset sector.480
Bitrefill2026-07-02 18:45:14Bitrefill Discloses Cyberattack Linked to North Korea's Lazarus Group: 18,500 Records ExposedCrypto e-commerce platform Bitrefill reported a cyberattack on March 1 originating from a compromised employee laptop. Attackers extracted legacy credentials to access production systems, internal databases, and hot wallets, stealing an undisclosed amount of funds and exploiting gift card inventory. Approximately 18,500 purchase records were breached, including email addresses, crypto payment addresses, and IP metadata; about 1,000 encrypted customer names were potentially exposed. Bitrefill linked the attack to North Korea's Lazarus Group based on malware signatures, reused infrastructure, and on-chain patterns. The company absorbed the losses, notified affected users, and implemented enhanced security measures. No evidence suggests full database exfiltration or that customer data was the primary target. According to Chainalysis, North Korea-linked groups stole over $2 billion in crypto in 2025.430
Anthropic2026-06-04 06:59:45Anthropic Finds That About 67% of Banned Accounts Used AI to Prep CyberattacksAI firm Anthropic's latest annual security assessment reveals that roughly 67% of accounts banned from its platform over the past year leveraged AI to prepare for cyberattacks, signaling a worrying acceleration in the weaponization of AI tools by malicious actors.550
Anthropic2026-06-04 06:59:45Anthropic: 67% of Banned Accounts Used AI to Prepare for CyberattacksAI firm Anthropic's annual threat mapping reveals that about 67% of banned accounts leveraged AI to prepare for cyberattacks, showing malicious actors are becoming more dangerous with AI.460
