Binance has issued a warning about a malware attack targeting its users, which alters cryptocurrency withdrawal addresses.
The malware replaces a user’s intended withdrawal address with that of the scammer, leading to irreversible financial losses if the user does not notice the change before completing the transaction.
Since August 2024, this sophisticated malware has been spreading, with attackers using it to divert funds to their wallets. Binance’s security team is actively blocking and reporting these malicious addresses and alerting affected users. They are also blacklisting suspicious addresses and coordinating with law enforcement.
Users are advised to exercise extreme caution when downloading applications or browser extensions, particularly from unofficial sources, and to double-check withdrawal addresses. Binance suggests taking screenshots of wallet addresses before confirming transactions as an additional safeguard.
Additionally, a fraudulent website pretending to offer help with the malware issue has emerged. This site, which misuses Binance’s branding, attempts to trick users into granting unauthorized access to their wallets. Binance emphasizes that these scammers exploit victims already affected by the malware, highlighting the importance of vigilance against such deceptive schemes.
WOO X, a popular cryptocurrency trading platform, has been hit by a serious security breach.
The first half of 2025 has already become the most damaging period in Web3 security history, according to Hacken’s newly released Half-Year Security Report.
The U.S. Department of Justice has officially ended its investigation into Kraken co-founder Jesse Powell, according to a Fortune report.
Indian crypto exchange CoinDCX has confirmed a $44 million security breach involving one of its internal liquidity accounts.