A threat actor used SMS phishing (smishing) to steal employee credentials and gain unauthorized access to corporate systems, primarily targeting cryptocurrency, tech, telecom, and entertainment companies. The group then used this access to steal over $8 million in cryptocurrency from victims. No specific vulnerability, CVSS score, or patch information is provided, as this was a social engineering attack rather than a software flaw.
Threat Intelligence Guilt admitted by British hacker in $8M crypto theft scheme April 21, 2026 Share By SC Staff BBC reports that British man Tyler Buchanan could face a maximum sentence of 22 years in prison after pleading guilty to a scheme that targeted the computer systems of around 12 companies and resulted in the theft of at least $8 million in cryptocurrency from U.S. victims. According to the U.S. Department of Justice, Buchanan was involved in a group that used SMS phishing attacks to trick employees into revealing their login details so they could hack computer systems. The group targeted companies in industries including virtual currency, technology, telecommunications, and entertainment between September 2021 and April 2023. Authorities found a digital device at Buchanan's home in Scotland containing sensitive data from several individuals, along with a file that has the login credentials for one victim's account and cryptocurrency seed words. He admitted to one charge of aggravated identity theft and another for conspiracy to commit wire fraud and will be sentenced on Aug. 21. SC Staff Related Data Security Over 400K records allegedly stolen from major Dutch webshop Bol, data leaked SC Staff April 21, 2026 Major Dutch online store Bol, which also operates in Belgium, had information from more than 400,000 of its Belgian users allegedly compromised by the hacker using the alias "Jeffrey Epstein," reports Cybernews. Threat Intelligence Major Kelp DAO cross-chain bridge theft attributed to North Korean hackers SC Staff April 21, 2026 North Korean state-backed threat operation TraderTraitor, a subset of the Lazarus Group, was reported by cryptocurrency infrastructure developer LayerZero to have been behind the nearly $300 million crypto heist on major liquid restaking protocol Kelp DAO over the weekend that involved the compromise of its LayerZero-powered cross-chain bridge, according to The Record, a news site by cybersecurity firm Recorded Future. Application security Over 130K users’ browser data siphoned by illicit TikTok downloader extensions SC Staff April 21, 2026 HackRead reports that over a dozen malicious TikTok downloader extensions have allowed the clandestine compromise of more than 130,000 users' Google Chrome- and Microsoft Edge-stored data as part of the StealTok campaign, which has been underway for more than a year. Related Events Cybercast Better Threat Intelligence Between Public and Private Sectors On-Demand Event Virtual Conference Nationwide Cybersecurity Summit 2025: Safeguarding America’s Digital Future On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Account Harvesting Backdoor Deauthentication Attack Deepfake Denial of Service Dictionary Attack Distributed Scans Domain Hijacking Dumpster Diving Fault Line Attacks You can skip this ad in 5 seconds