Kraken, one of the world's largest cryptocurrency exchanges, is being targeted by criminals who claim to possess access to some client account information. The criminal group is attempting to extort the platform.
The extortion attempt against Kraken marks another security incident in the cryptocurrency sector. The criminals have claimed possession of client data, though Kraken has not publicly detailed the scope or nature of the information allegedly accessed.
Kraken, founded in 2011, is among the oldest operating crypto exchanges globally. The platform serves hundreds of thousands of users and processes significant trading volumes daily.
The exchange has not yet disclosed whether it will negotiate with the extortionists or report the matter exclusively to law enforcement. Such incidents have become increasingly common in the crypto industry, with exchanges and platforms regularly targeted by criminal groups seeking financial payouts.
Kraken has a history of handling security matters, having previously experienced breaches and attacks. The current situation underscores ongoing security challenges facing major cryptocurrency platforms, despite advances in digital security infrastructure.
Details regarding the specific data compromised and the extortion demands remain unclear. The incident highlights risks that cryptocurrency users face when storing assets on centralized exchanges.
Federal prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting services with facilitating cyberattacks and money laundering that victimized cybercrime targets of $62 million.
A hacker accessed Suno's source code using stolen employee credentials, revealing that the AI music generator scraped decades of audio from YouTube to train its model.
Criminals can now clone voices with AI in mere seconds, outpacing traditional authentication defenses that banks and financial institutions rely on to prevent fraud.
Five malicious versions of AsyncAPI packages were published to npm, delivering a remote access trojan capable of stealing credentials and sensitive data from developer systems.