Black Hat Hacker

North Korea has set a new records when it comes to crypto theft in 2025, stealing a total of billions through increasingly sophisticated cyber operations that underscore how deeply digital asset crime has become embedded in the regime’s state strategy.

Hackers took control of Rainbow Six Siege, giving players billions of in-game credits and rare items, forcing Ubisoft to shut down the servers. The company is rolling back the affected accounts while allowing players to keep any items they used, and is gradually reopening the game.

Over $35 million in cryptocurrency stolen from LastPass users since 2022 has been traced to Russian cybercriminals using weak master passwords and laundering funds through mixers and Russian exchanges. TRM Labs found the thefts continued for years, showing that even encrypted vaults can be compromised if security practices are weak.

A crypto user "donated" $50 million worth of USDT to a group of hackers after copying a poisoned address from his transaction history, according to onchain security firm Web3 Antivirus.

A Singaporean investor lost S$100,000 after downloading a beta game launcher that contained malware, which emptied his crypto wallets. Despite using strong security measures, he was targeted by a sophisticated scam, highlighting risks for crypto users.

North Korean hackers are using fake video calls and hijacked accounts to trick crypto users into installing malware. The attacks give them full control of devices, allowing them to steal crypto wallets and spread the scam through trusted contacts.

A British man, Joseph James O’Connor, has been ordered to return $5.4 million in Bitcoin and other cryptocurrencies after hijacking celebrity Twitter accounts in 2020. The civil recovery covers the increased value of the stolen crypto and will be managed by a court-appointed trustee for public restitution.

Three Chinese men were jailed in Singapore for carrying out cyberattacks on gambling and SMS companies, earning US$3 million in cryptocurrency. They were hired by a Ni-Vanuatu citizen, used malware and hacking tools, and were caught during a police raid.

The official Dota 2 YouTube channel was briefly hacked to promote a fake Solana token called dota2coin, livestreaming the scam to thousands of viewers. A separate esports partner, PGL, was also hacked to stream a fake Bitcoin giveaway, but no user accounts or personal data were compromised.

FC Barcelona’s official Instagram account was hacked to promote a fake $FCB token on the Solana blockchain, misleading fans and causing potential financial losses. The token briefly surged to $3 million in value before crashing, highlighting risks of scams using popular brands and unverified cryptocurrencies.