Security teams faced a hectic 24 hours as a record $6.3 billion cryptocurrency heist forced Binance to manage withdrawals, while separate breaches exposed DHS personnel data, compromised TV boxes, and targeted supermarket freezers across Europe.
Binance hack recovery
Binance resumed withdrawals after a $6.3 billion heist that prompted North Korea to deny involvement. Outflows stabilized according to Reuters, while Bloomberg reported that the hackers created a windfall for fast traders.
Reported by Yahoo Finance
Reported by The Wall Street Journal
Reported by Reuters
DHS personnel data stolen
A hacktivist group stole personal information of nearly 300 Philadelphia-based DHS employees, part of a larger breach of roughly 41,000 agency personnel files. The group said the attack retaliated for increased Immigration and Customs Enforcement activity.
Reported by Philadelphia Inquirer
European supermarket freezer hack
Supermarkets across Europe reported a suspected hack targeting freezers, putting Britain on alert.
Reported by Bloomberg
Reported by The Telegraph
MECOOL TV boxes carry backdoor
Security firm Synthient reported that a MECOOL Android TV box carried the XCPE backdoor, which Google attributed to Chinese manufacturer Videostrong Technology. Synthient's founder called Google's estimate of 1.3 million infected devices highly conservative, noting the box also bundled residential proxy software.
Our story: Synthient links a MECOOL TV box to XCPE backdoor; founder calls Google's 1.3 million device count 'highly conservative'
Checked
12 claims in this story checked against 6 sources: 5 supported.
Show each claim
- SupportedBinance resumed withdrawals after the hack.WSJ.com: US Business: “The Morning Risk Report: Binance Resumes Withdrawals After Suffering Biggest-Ever Crypto Hack.”
- SupportedThe Binance hack was a record $6.3 billion heist.Yahoo Finance: “Binance to resume crypto withdrawals in phases after record $6 billion hack.”
- Not in the sourcesSecurity teams faced a hectic 24 hours.
- Not in the sourcesThe heist forced Binance to manage withdrawals.WSJ.com: US Business: “The Morning Risk Report: Binance Resumes Withdrawals After Suffering Biggest-Ever Crypto Hack.”
- Partly supportedNorth Korea’s denial of involvement was prompted by the heist."site:bloomberg.com when:1d" - Google News: “North Korea Denies Role in $6.3 Billion Binance Crypto Heist - Bloomberg.com.”
- Partly supportedA hacktivist group stole personal information from nearly 300 Philadelphia-based DHS personnel.Philadelphia Inquirer: “A hack exposed personal info of nearly 300 Philadelphia-based DHS personnel.”
- Not in the sourcesThe DHS incident was part of a larger breach of roughly 41,000 agency personnel files.Philadelphia Inquirer: “A hack exposed personal info of nearly 300 Philadelphia-based DHS personnel.”
- Not in the sourcesThe group said the attack was retaliation for increased Immigration and Customs Enforcement activity.Philadelphia Inquirer: “A hack exposed personal info of nearly 300 Philadelphia-based DHS personnel.”
- SupportedSupermarkets across Europe reported a suspected hack targeting freezers."site:bloomberg.com when:1d" - Google News: “Supermarkets Across Europe Report New Suspected Freezer Hack - Bloomberg.”
- SupportedThe freezer hack put Britain on alert."site:telegraph.co.uk when:1d" - Google News: “Britain on alert as hackers shut down supermarket fridges across Europe - The Telegraph.”
- SupportedSynthient reported malware on a MECOOL Android TV box, and Google attributed the backdoor and botnet to Videostrong Technology.BleepingComputer: “Synthient explains how it traced the XCPE backdoor and infrastructure to Videostrong after discovering the malware preinstalled on a MECOOL KM9PRO Max Android TV box purchased in late 2025.”
- Not in the sourcesSynthient’s founder called Google’s estimate of 1.3 million infected devices “highly conservative.”BleepingComputer: “Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes”
