bit.fanBit.FanWeb3 News · Betting Reviews · Market Insights
‹ BackNewsMonero

Monero

Apple
2026-08-16 13:17:00

Dutch NCSC warns exploited macOS flaw let attackers install Monero miners on internet-exposed Macs

The Dutch National Cyber Security Centre (NCSC) has warned that a recently patched authentication flaw in Apple’s macOS Screen Sharing component is already being exploited in the wild, according to The Hacker News. The bug, tracked as CVE-2026-65400 and rated 9.8 on the CVSS scale, allowed attackers to access internet-exposed Macs listening on port 5900 without valid credentials and deploy Monero mining malware. Apple issued emergency fixes on Aug. 6 through macOS Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9, saying the patch strengthened credential validation by improving state management. The NCSC said it confirmed multiple attacks in which intruders gained root privileges and installed mining software. Security researcher @osxreverser also disclosed another pre-authentication flaw in the same component, likewise fixed in version 26.6, which could be exploited with only a target IP address and no username. Calif said researchers used AI to build working exploits for the two bugs in just four hours, highlighting how AI is shortening the time between vulnerability discovery and exploit development. Users were advised to update immediately or disable Screen Sharing if patching is not possible.

1150
Dutch NCSC warns exploited macOS flaw let attackers install Monero miners on internet-exposed Macs
XMR
2026-08-09 12:54:47

Fresh Wallet Opens $4.18M Leveraged XMR Long on Hyperliquid After Depositing $2M USDC

A newly created crypto wallet has drawn attention from on-chain analysts after depositing 2 million USDC as margin and opening a leveraged long on Monero (XMR). On August 9, analyst Ai Yi (@ai_9684xtpa) flagged the address 0x615…d69d5, which then built a 4x leveraged position of 10,962.78 XMR at an average entry price of $383.23. The position is worth about $4.18 million, making it the second-largest XMR position on Hyperliquid and representing 10.5% of the platform's XMR open interest. In addition to the long, the same wallet placed limit buy orders totaling $1.082 million between $378.2 and $381.4. The orders indicate the trader stands ready to add to the position if XMR falls into that range, according to the monitoring data. The alert was first reported by BlockBeats on August 9.

2100
Fresh Wallet Opens $4.18M Leveraged XMR Long on Hyperliquid After Depositing $2M USDC
Bitcoin
2026-08-02 09:39:27

Fake Trezor support scam drains $282 million in Bitcoin and Litecoin

A Bitcoin and Litecoin holder lost about $282 million after handing over a 12-word seed phrase to attackers posing as Trezor support on Jan. 10, according to Odaily. The stolen assets included roughly $139 million worth of Bitcoin and $153 million worth of Litecoin. Blockchain forensics firm ZeroShadow said the case was the result of a social engineering attack rather than a breach of wallet software or private key infrastructure. The firm said the funds were broken up within minutes through the THORChain cross-chain bridge and then converted into Monero using instant swap services. ZeroShadow also said its monitoring team flagged and froze about $700,000 within 20 minutes. The report added that under the BIP39 standard, a 12-word seed phrase contains about 128 bits of entropy, while a 24-word phrase contains 256 bits. Chainalysis has estimated that as much as 23% of mined Bitcoin may be permanently inaccessible because of lost keys, including cases involving forgotten seed phrases, damaged backups, and missing inheritance arrangements.

1950
Fake Trezor support scam drains $282 million in Bitcoin and Litecoin
Steam
2026-07-25 03:07:06

FBI traced alleged Steam malware funder through Uber Eats orders and seized wallet seed phrases

Federal prosecutors have accused 21-year-old Zyaire Wilkins of helping fund a scheme that placed crypto-stealing malware inside eight games distributed on Steam, according to a 15-page criminal complaint cited by BlockTempo. Wilkins was arrested in Florida on July 14. Investigators say the campaign ran from May 2024 to February 2026, infected about 8,000 devices, opened roughly 80 crypto wallets, and caused at least $220,000 in confirmed losses. The case stands out because investigators did not break Monero’s privacy model to identify the suspect. Instead, the FBI followed a trail that moved from stolen-wallet bitcoin to Bitrefill gift cards, then to more than 500 Uber Eats orders worth over $9,000 sent to three addresses. The complaint also says agents connected browser cookies, email accounts carrying Wilkins’ initials, T-Mobile subscriber data, a Snapchat account that had used his real name, and a family residence in North Lauderdale, Florida. When agents executed a search warrant on July 8, they seized a laptop, a phone, and three wallet seed phrases, including one for a Monero wallet. According to the report, that wallet exposed activity across eight addresses totaling 1,233 XMR, valued at about $382,000 at current prices. Prosecutors have charged Wilkins with one count of conspiracy to obtain information from a protected computer for private financial gain. He is presumed innocent unless convicted.

2030
FBI traced alleged Steam malware funder through Uber Eats orders and seized wallet seed phrases