Connect with us

Business

Coinbase breach hit almost 70k users

Published

on

Coinbase, a leading cryptocurrency exchange, has disclosed a significant data breach affecting approximately 69,461 users, including 217 residents of Maine. The breach, which occurred on December 26, 2024, remained undetected until May 11, 2025, nearly six months later. The incident came to light following a complaint filed by law firm Latham & Watkins LLP with the Maine Attorney General’s office.

The breach involved cybercriminals bribing overseas customer service representatives to obtain sensitive user information, such as names, contact details, and physical addresses. Subsequently, the attackers demanded a $20 million ransom from Coinbase, threatening to release the stolen data. Coinbase refused to comply with the ransom demand and terminated the contractors involved in the breach.

In response to the breach, Coinbase has pledged to reimburse affected users and has estimated the total cost of remediation and reimbursements to be between $180 million and $400 million. The company is also cooperating with law enforcement agencies in an ongoing investigation.

The breach has raised concerns about the security of Know Your Customer (KYC) data collection practices in the cryptocurrency industry. Experts warn that such data leaks can pose physical risks to crypto investors, making them targets for extortion and other crimes.

Coinbase’s stock experienced a 7% decline following the public disclosure of the breach. The company is taking steps to enhance its security measures, including establishing a new support hub in the United States and implementing stronger safeguards to protect user data.

Business

Dubai regulator clarifies real-world asset tokenization rules

Published

on

Dubai’s Virtual Asset Regulatory Authority (VARA) has unveiled updated guidelines that provide a comprehensive framework for the tokenization of real-world assets (RWAs), marking a significant advancement in the emirate’s digital asset regulatory landscape.

The revised Rulebook, released on May 19, 2025, introduces clear provisions for the issuance and secondary market trading of Asset-Referenced Virtual Assets (ARVAs). These tokens represent direct or indirect ownership of tangible assets such as real estate, commodities, or income-generating instruments. The new regulations aim to transition RWA tokenization from a conceptual stage to a regulated practice within Dubai and the broader United Arab Emirates.

Legal experts highlight that the updated rules address previous challenges faced by security token offerings (STOs), which struggled due to regulatory ambiguities and limited market infrastructure. Under the new framework, regulated exchanges and broker-dealers in Dubai are authorized to distribute and list ARVA tokens, providing a structured pathway for asset tokenization.

Issuers of ARVA tokens are required to obtain a Category 1 Virtual Asset Issuance license, submit a comprehensive white paper and risk disclosure statement, and maintain a paid-up capital of at least 1.5 million UAE dirhams (approximately $408,000) or 2% of the reserve assets held. Additionally, issuers must undergo monthly independent audits and adhere to ongoing supervisory oversight.

The implementation of these guidelines positions Dubai as a leading jurisdiction in the regulation of digital assets, offering clarity and structure that could attract institutional participation and foster innovation in the tokenization of real-world assets.

Continue Reading

Business

Microsoft takes legal action against infostealer Lumma

Published

on

Microsoft has initiated a comprehensive legal and technical offensive against Lumma Stealer, a notorious information-stealing malware responsible for compromising nearly 400,000 Windows systems worldwide between March and May 2025. This concerted effort, in collaboration with international law enforcement agencies, marks a significant stride in combating cybercrime.

On May 21, a federal court in Georgia authorized Microsoft’s Digital Crimes Unit (DCU) to dismantle the infrastructure supporting Lumma Stealer. Consequently, approximately 2,300 domains integral to the malware’s operations were taken down, blocked, or suspended. Additionally, the U.S. Department of Justice seized Lumma’s central command structure and disrupted marketplaces facilitating the malware’s distribution.

Lumma Stealer, also known as LummaC2, has been active since 2022, evolving through multiple iterations to enhance its capabilities. The malware is designed to extract sensitive data from web browsers and applications, including passwords, credit card information, bank account details, and cryptocurrency wallet credentials.

The takedown operation was bolstered by the efforts of Europol’s European Cybercrime Center and Japan’s Cybercrime Control Center, which facilitated the suspension of locally based Lumma infrastructure. Microsoft’s collaboration with these agencies underscores the importance of international cooperation in addressing the growing threat of cybercrime.

Despite this significant disruption, cybersecurity experts caution that the threat from infostealers like Lumma remains high. The malware’s effectiveness and widespread adoption make it a preferred tool for cybercriminals and nation-state actors alike.

Microsoft’s decisive action against Lumma Stealer highlights the evolving nature of cyber threats and the critical need for robust cybersecurity measures. The company’s ongoing commitment to protecting users and dismantling malicious networks serves as a model for industry-wide efforts to combat cybercrime.

Continue Reading

Business

BlackRock’s Bitcoin ETF notches 2-week high inflow as BTC nears $112K

Published

on

BlackRock’s iShares Bitcoin Trust (IBIT) experienced a significant surge in investor interest on May 21, recording a net inflow of $530.6 million—the highest since May 5. This influx coincided with Bitcoin’s price climbing to $111,897, nearing its all-time high.

The trading volume for IBIT also reached levels not seen since January, indicating heightened market activity. Notably, the ETF acquired 4,931 BTC in a single day, surpassing the 450 BTC mined during the same period. Overall, U.S. spot Bitcoin ETFs collectively garnered $607.1 million in inflows, with Fidelity’s Wise Origin Bitcoin Fund (FBTC) contributing $23.5 million.

Bloomberg ETF analyst Eric Balchunas described the trend as a “classic feeding frenzy,” attributing it to Bitcoin’s recent rally. He noted that ETF trading volumes are expected to double their average flows.

Industry experts suggest that the momentum in Bitcoin ETF investments may continue, especially if macroeconomic factors, such as potential interest rate cuts by the Federal Reserve, come into play. Jeff Mei of BTSE highlighted that investors are increasingly turning to Bitcoin ETFs, which have seen $3.6 billion in net inflows in May alone.

Continue Reading

Trending

Copyright © 2025 cryptonews.lk