Main to remember
Have the Crypto.com Customer Funds been assigned?
No, Crypto.com confirmed that no customer funds were accessible or at risk. Only a very small number of partial personal information from users has been assigned.
Did crypto.com disclose the violation publicly?
No, the company did not publicly inform affected users, which aroused criticism from the Zachxbt blockchain investigator.
Crypto.com would have suffered an unknown data violation previously linked to the dispersed spider hacking group, which raises concerns about its security posture.
Attack details
According to a Bloomberg survey, the attack involved adolescent hackers, including Noah Urban, 18, Florida, specializing in phishing employees in telecommunications, technology and cryptocurrency companies.
Urban and its employees have accessed sensitive user information. The group previously targeted MGM resorts and other companies.
Crypto.com recognized that the breach had had an impact on “a very small number of people”, but stressed that no customer fund was compromised.
Response from crypto.com
Despite this, the company has not publicly informed the users concerned.
Noting on the same Crypto.com The CEO, Kris Marszalek, noted,
“Any suggestion that we have not reported or disclosed a security incident is completely unfounded – as we have reported in an opinion of the Data Security Incidence NMLS and in additional relations with relevant jurisdiction regulators, we have detected a phishing campaign that targeted one of our employees in 2023.”
Marszalek said the incident was contained in a few hours, without any customer funds ever in danger, and that only a very limited number of personal partial information of users has been assigned.
He even underlined the culture of the “security” of the company.
What has Zachxbt has to say about this violation?
However, the engineer of the Blockchain Zachxbt went to X to call Crypto.com for not having disclosed the data violation. He said,
“Your team addressed a violation that had an impact on the personal information of your users.”
He added,
“They were raped several times.”
That said, the violation of Crypto.com was part of a larger criminal campaign orchestrated by the scattered spider group, which had gone from a simple exchange of SIM to the infiltration of sophisticated companies.
Originally from Florida, Noah Urban, then adolescent, acted as a “caller” inside the group, persuading employees to put references that unlocked internal systems.
Wider criminal campaign
The attack took place before March 2023. Urban was arrested nine months later, in January 2024, and accused of hacking 13 companies.
Authorities said the group has also abused United Parcel service data.
Following acts of accusation of urban and four accomplices, he pleaded guilty of fraud by wire and aggravated identity theft.
He led to a crisis of $ 4.8 million in crypto, $ 13 million on return and a 10 -year prison sentence with additional release.
All these disclosure coincided with the predictions of the CEO Marszalek on a solid performance in the fourth quarter and a partnership with Yorkville Acquisition Corp. And Trump Media to train Trump Media Group Cro Strategy, Inc., a Treasury Digital Asset Treasury focused on the acquisition of Cronos (CRO).
