$VANA Airdrop Scam

While investigating suspicious websites, our researchers discovered this fake "$VANA Airdrop" on signup-vana[.]com (but it could be hosted elsewhere). Users who register can supposedly take part in a token airdrop – instead, they expose their digital wallets to a cryptocurrency drainer. It must be emphasized that this scam is not associated with the real Vana network (vana.org) or any other existing projects, platforms, and entities. ...

Play Ransomware Attack Linked To North Korean State-Sponsored Threat Actors

According to a new report by Palo Alto’s Unit 42, North Korean state-sponsored threat actors, tracked by the security firm as Jumpy Pisces but also tracked as Andariel, have been linked to the Play ransomware gang. Researchers believe this is the first instance of the group using existing ransomware infrastructure, potentially acting as an initial access broker (IAB) or an affiliate of the Play ransomware group. This also possibly signals dee...