Cyberattack on Crypto.com: A Review with Consequences

The renowned crypto service provider Crypto.com was the target of a hacking attack initiated by the group Scattered Spider. According to media reports, this incident has not been publicly disclosed so far. The security officer of the blockchain security firm Slowmist, Shān Zhang, described the incident as an 'internally controllable issue' that was properly resolved. The CEO of Crypto.com, Kris Marszalek, stated that the company reported the incident to the relevant authorities when a phishing campaign against an employee was discovered in 2023. A spokesperson for Crypto.com confirmed that only limited personal data was affected and everything was contained within a few hours of discovery, with no customer funds being at risk. The investigation traced the attack back to Noah Urban, a young adult from Florida. Urban was part of Scattered Spider and was able to breach Crypto.com's systems using stolen data, including information from a United Parcel Service database. The hacking operation was part of a larger campaign in which Scattered Spider infiltrated over 200 companies. Urban pleaded guilty this year and was sentenced to ten years in prison for wire fraud and identity theft. Authorities confiscated crypto assets worth 4.8 million dollars from Urban's devices and ordered 13 million dollars in restitution for the victims.