The cybersecurity landscape saw several alarming incidents in August 2026, including a significant breach involving North Korean hackers and a fraudulent cryptocurrency startup. Security researchers successfully lured three developers believed to be associated with North Korean hacking groups into a fake DeFi project named Ballena Azul. These individuals, who had successfully passed interviews and signed contracts, were given access to virtual machines where their actions were monitored. This experiment was conducted by specialists from BCA LTD, NorthScan, and ANY.RUN, building on a previous investigation in 2025 that had also targeted North Korean hackers.
In addition to this ruse, researchers demonstrated the "Zombie Card" attack at the USENIX Security Conference, which allows the use of expired contactless Visa cards for payments by manipulating the expiration date received by POS terminals through NFC technology. The researchers emphasized that for this attack to succeed, several conditions must be met, including the card being linked to an active account.
Meanwhile, alarming statistics from the Bank of Russia revealed that in the second quarter of 2026, 252.3 million rubles were stolen from Russian users through ATMs due to fraudulent operations, marking a significant increase from previous periods. The number of such incidents rose sharply, with over 1700 cases reported, compared to 1070 for the entire previous year.
Furthermore, a mass breach of over 14,000 Dahua cameras was reported under the campaign named CameraSwarm, highlighting the persistent vulnerability in connected devices. Additionally, vulnerabilities in Coldcard wallets resulted in losses exceeding 100 million USD for users.
These incidents underscore the growing risks and challenges within the cybersecurity sector, indicating that companies must enhance their hiring protocols and security measures to protect against sophisticated attacks and fraudulent schemes. As the market evolves, it becomes increasingly crucial for competitors to adopt robust security practices to safeguard their operations and customer data.
Informational material. 18+.
