Cyber Security News

Hacking Editorial Brief — July 1, 2026

North Korean-Linked Threat Actors Steal $75.87 Million in June Crypto Heists

Cryptocurrency platforms lost $75.87 million to hackers in June 2026, with forensic analysis pointing to tooling and techniques commonly associated with North Korean threat groups. Security firm Quantstamp identified patterns consistent with DPRK-affiliated actors, who have systematically targeted crypto exchanges and DeFi platforms to fund state operations. The June figure contributes to what industry analysts are calling a record-breaking second quarter for crypto-focused attacks. Separately, researchers documented the "Silent Swap" crypto clipper campaign, which uses a fraudulent Google Notes browser extension to silently replace cryptocurrency wallet addresses during transactions. The malware, delivered via an unsigned .NET installer named BaseZipInstaller, represents an evolution in clipboard hijacking tactics targeting crypto users.

Russian NoName057(16) Group Targeted Canadian Water Infrastructure

Canada's Communications Security Establishment disclosed that Russian hacktivist group NoName057(16) attempted to disrupt a Canadian water treatment facility in October, with the agency learning of the attack on October 7 through the group's own online claim of responsibility. While specific operational impacts were not detailed, the incident underscores the expanding target set for Russian hacktivist groups beyond traditional IT networks into operational technology environments controlling critical infrastructure. In other regional activity, Japanese hotels were targeted through a blockchain-hosted phishing campaign exploiting Booking.com partner communications, with May attacks delivering malware hosted on blockchain infrastructure to evade traditional takedown mechanisms.

Sources: Yahoo Finance · Hacker News · Gov Info Security · Infosecurity Magazine