Cyber intelligence firm, Silent Push, warns of a sophisticated malware campaign, named PoisonSeed, that targets both crypto and non-crypto users. The scammers trick users of mass email providers like Mailchimp and SendGrid into giving their login details, download mailing lists and send deceptive emails impersonating crypto exchange Coinbase. Victims are manipulated into sharing 12-word seed phrase; enabling the perpetrators to drain their wallets.

Flaw in ESET security software used to spread malware from ToddyCat group
Researchers discovered a vulnerability in ESET’s cybersecurity software that could be exploited by state-backed hackers to secretly infect devices with malicious code. The flaw allows