Weekly Cyber Recap: Record Crypto Theft Attributed to North Korea and Attacks That Start Small

This week's security recap from The Hacker News points to a familiar pattern: many attacks did not need much sophistication. The opening lists a fake support call, a trusted extension, a shared link and a device with no password as small, easily overlooked things that were each enough to cause serious trouble. It also says the damage often began somewhere nobody was looking.

The biggest story was a record theft. The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets from Binance to a North Korean hacking group called TraderTraitor. The recap puts the total at $6.43 billion, which is larger than the $1.46 billion taken from Bybit in February 2025 and makes it the largest cryptocurrency theft in history. The funds were stolen across 11 blockchains, and 82% of them were on Ethereum and Bitcoin. Of the total, $2.85 billion in assets has been frozen on-chain by Tether, Circle, Ripple, Arbitrum and Optimism.

The article also notes that the gap between a software patch and a working exploit is shrinking fast. The recap's headline lists critical vulnerabilities, a Linux DDoS botnet, device-code phishing and Android spyware as other topics, though this opening section does not give details on them. Readers should consult the full article for those.