CYBERSECURITYTRACKER
TRACKING7,159 stories in this site build1,507 vulnerability news stories in this site build
Permanent story citation

COLDCARD security audit phishing attack installs remote access tool

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3924

As cited

Copy frozen at (site build).

threat intel

COLDCARD security audit phishing attack installs remote access tool

A phishing campaign leverages concerns about a recently disclosed COLDCARD wallet vulnerability and a suspected $88.6 million Bitcoin theft to distribute ScreenConnect remote access software to victims. Attackers are using fear and urgency around the vulnerability disclosure to increase click-through and installation rates.

Why it matters: COLDCARD users and other cryptocurrency holders are targeted by this campaign, which aims to establish remote access that could lead to theft of digital assets or credentials; practitioners managing cryptocurrency infrastructure or user awareness should monitor for phishing referencing this vulnerability.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

COLDCARD security audit phishing attack installs remote access tool

A phishing campaign leverages concerns about a recently disclosed COLDCARD wallet vulnerability and a suspected $88.6 million Bitcoin theft to distribute ScreenConnect remote access software to victims. Attackers are using fear and urgency around the vulnerability disclosure to increase click-through and installation rates.

Why it matters: COLDCARD users and other cryptocurrency holders are targeted by this campaign, which aims to establish remote access that could lead to theft of digital assets or credentials; practitioners managing cryptocurrency infrastructure or user awareness should monitor for phishing referencing this vulnerability.

VendorsConnectWise
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary