Jewelbug attackers steal government emails and crypto
The Jewelbug attackers break into government email systems and steal cryptocurrency. They focus on military and government targets.
- Report priority
- Medium
What is known
Jewelbug attackers send phishing emails with malicious links to government employees, tricking them into downloading spyware that steals emails and crypto wallet keys.
What to do
Check if you work for a government or military organization and received suspicious emails with login links recently.
Report any suspicious emails to your IT security team and enable two-factor authentication on all accounts immediately.
Reported details
A military email admin clicks a fake login link in a phishing email. The link downloads spyware that steals their email passwords and crypto wallet keys. The attackers then drain the admin's crypto wallet and read their government emails.
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud.