Weekly Roundup Covers Grinex Crypto Theft, North Korea-Linked Scheme and Rockstar Extortion Claim
Summary
The roundup covers Grinex’s reported loss of over $15 million in USDT, sentences in a North Korea-linked IT worker scheme, a TierOne exploit-writing contest, and Rockstar’s confirmation of unauthorized access alongside ShinyHunters’ extortion claim.
Key points
- Grinex suspended trading and withdrawals after a wallet breach resulted in more than $15 million in USDT being stolen; funds were moved across Ethereum and Tron using chain-hopping and layering.
- Two U.S. nationals were sentenced for a North Korea-linked remote employment scheme that used stolen identities, laptop farms and shell companies to place overseas workers at more than 100 companies.
- The TierOne dark web forum launched a reported $10,000 contest for technical exploit writeups, with topics including RCE, IDOR, SSTI, firmware attacks and EDR bypasses; ransomware-group sponsorship was reported.
- Rockstar Games confirmed unauthorized access through a third-party service and said core operations and player systems were unaffected. ShinyHunters claimed access to internal data and demanded payment, allegations not independently confirmed in the article.
- A study of 1,050 children found that many previously active users aged 12–15 continued accessing social platforms despite Australia’s under-16 restriction.
Article Details
- Event Type
- Weekly cybersecurity roundup covering a cryptocurrency exchange breach, a North Korea-linked remote employment fraud scheme, an underground exploit-writing contest, social-media enforcement concerns, and an extortion-related cyberattack.
- Impact
- The Grinex wallet breach resulted in more than $15 million in USDT theft, and Grinex suspended trading and withdrawals. Two U.S. nationals were sentenced for their roles in a scheme that generated more than $5 million using stolen identities, laptop farms, and shell companies. Rockstar Games confirmed unauthorized access through a third-party service; it said core operations and player systems were unaffected, while ShinyHunters claimed access to internal data and demanded payment. The TierOne forum offered $10,000 for exploit writeups. A study found that over 60% of previously active users aged 12–15 continued accessing social platforms despite Australia’s under-16 restriction.
People
Kejia WangReceived a 108-month prison sentence for a role in the North Korea-linked remote employment fraud scheme, which used stolen identities, laptop farms, and shell companies.Zhenxing WangReceived a 92-month prison sentence for a role in the North Korea-linked remote employment fraud scheme, which used stolen identities, laptop farms, and shell companies.
Threat Actors
Products
EthereumAttackers used chain-hopping and layering across Ethereum and Tron to obscure transaction trails.Grinex#Grinex #ShinyHuntersInstagram60% of previously active users aged 12–15 continue accessing platforms such as TikTok, YouTube, and Instagram.TikTokchildren found that over 60% of previously active users aged 12–15 continue accessing platforms such as TikTok, YouTube, and Instagram.TRONAttackers used chain-hopping and layering across Ethereum and Tron to obscure transaction trails.USDTA coordinated wallet breach at Grinex resulted in over $15 million in USDT stolen and trading halted.YouTubefound that over 60% of previously active users aged 12–15 continue accessing platforms such as TikTok, YouTube, and Instagram.
Countries
AustraliaAustralia Social Media Ban Faces Enforcement Questions North Koreanationals were sentenced for a North Korea-linked remote employment fraud using stolen identities and laptop farms.United StatesTwo U.S. nationals were sentenced for a North Korea-linked remote employment fraud using stolen identities and laptop farms.