scam-alert
In-depth research, opinions, and analysis of scam-alert trends.
Kaspersky Discloses OkoBot Malware Targeting Crypto Investors
<p>Kaspersky has disclosed OkoBot, a modular malware framework built to drain cryptocurrency wallets, steal seed phrases, and harvest credentials, warning that the campaign had already reached hundreds of victims across more than 25 countries and remained active as of mid-July 2026.</p>
OkoBot Malware Targets Crypto Wallet Mnemonic Phrases: What the Report Confirms
<p>A malware framework known as OkoBot has been reported to target cryptocurrency wallet mnemonic phrases, the recovery seed words that grant full control over self-custodied crypto holdings. This account is based on a single security report, and key details about scope and impact remain unconfirmed.</p>
British Gang Sentenced for Posing as Police to Steal $5.4M in Crypto
<p>The central confirmed development is the sentencing itself. The Metropolitan Police reported that a group of men were jailed after stealing more than £4 million of crypto assets.</p>
ResolvLabs Attacker Transfers 580 ETH Worth $1.09 Million
<p>A wallet tied to the ResolvLabs attacker has moved 580 ETH worth about $1. 09 million, an on-chain transfer that puts the stolen-fund trail back under active watch by investigators tracking the exploit.</p>
South Dakota Crypto Investor Indicted in Alleged $20M Investment Fraud
<p>The case centers on a Sioux Falls crypto investor named in an indictment announcing counts of wire fraud, money laundering and bank fraud, according to the U. S.</p>
Singapore Police and Crypto Exchange Stop $4.2M Scam Losses for 145 Victims
<p>Singapore Police and a cryptocurrency exchange jointly intervened to prevent 145 potential scam victims from losing more than $4. 2 million, marking the second such collaborative operation between law enforcement and a crypto platform in the city-state this year.</p>
Injective npm Package Attack Exposes Risk to Wallet Private Keys
<p>Attackers backdoored the official Injective TypeScript SDK on npm, inserting code into 18 packages that captured wallet private keys and seed phrases during normal key-derivation flows before clean replacements were published roughly 49 minutes later.</p>
Summer.fi attacker swaps 1.35M DAI for ETH, sends funds to Tornado Cash
<p>Summer. fi, an Ethereum-based DeFi frontend for lending and borrowing protocols, became the target of an exploit that resulted in the loss of user funds.</p>
CFTC Charges North Carolina Man In $14M Crypto And Futures Fraud
<p>The Commodity Futures Trading Commission has charged a North Carolina man and his firm with orchestrating a $14 million crypto and futures fraud that allegedly bilked more than 60 investors over nearly four years.</p>
ZachXBT Flags 3,200 ETH Tornado Cash Move and $5.5M CCTP Bridge
<p>Blockchain investigator ZachXBT has flagged suspicious on-chain activity involving 3,200 ETH reportedly withdrawn from Tornado Cash, with approximately $5. 5 million subsequently bridged through Circle’s Cross-Chain Transfer Protocol (CCTP).</p>
Vietnamese Police Report New Asset Seizures, Bank-Account Freezes in ONUS Crypto Fraud Case
<p>Vietnamese law enforcement authorities disclosed a fresh round of enforcement actions targeting assets linked to the ONUS cryptocurrency fraud investigation. The update confirms that police have carried out new asset seizures and imposed bank-account freezes as part of the case.</p>
Specter Flags Suspected Mining Express 5,004 ETH-to-DAI Swap
<p>A wallet suspected of ties to Mining Express swapped 5,004 ETH for 8. 8 million DAI, according to an alert flagged by on-chain monitoring entity Specter.</p>
CertiK Says Hinkal Protocol Was Attacked, $800K USDC Stolen
<p>Blockchain security firm CertiK has flagged an attack on Hinkal Protocol, reporting that approximately $800,000 in USDC was stolen from the privacy-focused DeFi platform.</p>