cryptocurrency wallets
Coverage of cryptocurrency wallets in the Nexus archive.
- Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
Fake game downloads are spreading malware through RenPy Loader, which uses MSBuild and EtherHiding to deliver Amatera Stealer. The malware steals sensitive data like passwords, cryptocurrency wallets, and browser information by disguising itself as legitimate game or software installers.
- MacOS malware hijacks Telegram sessions, targets crypto wallets: SlowMist
A macOS malware steals credentials to hijack Telegram sessions, decrypt cryptocurrency wallets, or trick users into entering their wallet recovery phrases through fake applications.
- Feds Arrest Florida Man Over Video Game Malware That Stole $220K in Crypto
Zyaire Wilkins is accused of distributing malware through video games, which infected 8,000 devices and compromised 80 cryptocurrency wallets, stealing $220,000 in crypto according to the FBI.
- US Treasury freezes over $130 million tied to Iran-linked crypto wallets
The US Treasury froze over $130 million linked to Iran-associated cryptocurrency wallets. Treasury Secretary Scott Bessent announced that OFAC sanctioned multiple wallets tied to Iran.
- Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Security firm Coinspect disclosed the 'Ill Bloom' vulnerability in cryptocurrency wallets, where weak randomness in recovery phrase generation allows attackers to steal funds. Attackers have already exploited this flaw, draining $3.1 million and executing a coordinated sweep in May.
- Coinbase’s Base launches AI tool for ChatGPT to manage crypto wallets and DeFi apps
Coinbase's Base has launched an AI tool integrated with ChatGPT to streamline management of cryptocurrency wallets and DeFi applications. The tool aims to enhance user experience by leveraging AI for crypto-related tasks.
- Are built-in wallet swaps reliable or just a gimmick?
The author is questioning the reliability of built-in wallet swap features and seeking feedback from others who may have experienced issues. They are unsure if these features execute properly or route through random providers. The author is seeking reassurance about the trustworthiness of these features.
- Terminal (Padre)- First time wallet setup question
A new user connects their Phantom wallet to Terminal (Padre) and is confused about whether to use Terminal's on-site wallet or import their own. They question why the platform requests their private key and seek clarification on common practices for security.
- Out of new wallets coming out, is there one that has a killer feature that is a game changer?
A Reddit user questions whether new cryptocurrency wallets offer a groundbreaking feature or if traditional offline password storage methods remain superior. The query humorously suggests hiding a password in an old soup can as an alternative.
- PyPI package with 1.1M monthly downloads hacked to push infostealer
A malicious version of the 'elementary-data' Python package on PyPI was pushed by an attacker to steal sensitive developer data and cryptocurrency wallets. The package, with 1.1 million monthly downloads, was compromised to distribute an infostealer.
- Do you archive old wallets
The article discusses concerns about managing old cryptocurrency wallets with stored private keys, fearing accidental funding from forgotten sources. The author proposes a self-hosted app to monitor transactions on archived wallets and seeks advice on organizing backups for seed phrases and private keys.
- Are wallets really safe??
A Reddit user questions the safety of cryptocurrency wallets after accidentally restoring a non-mine wallet using a seed phrase, raising concerns about potential security risks and accidental access to others' wallets.
- 26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases
Cybersecurity researchers have identified 26 malicious apps on the Apple App Store that mimic legitimate cryptocurrency wallets to steal recovery phrases and private keys. These apps, active since fall 2025, trick users into downloading trojanized versions of authentic wallets via fake App Store redirects.
- macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets
A macOS ClickFix campaign uses AppleScript-based infostealers to steal credentials and session cookies from 14 browsers, 16 cryptocurrency wallets, and over 200 extensions. The attack targets macOS users, harvesting sensitive data including browser sessions and cryptocurrency information.