INCIDENT EVIDENCE GRAPH

COLDCARD security audit phishing attack installs remote access tool

2026-08-03T03:30:47Z

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. [...]

• Victim: users
• Actor: Hackers
• Exploit: COLDCARD wallet vulnerability
• Method: Phishing campaign tricking users into installing ScreenConnect remote access software

Primary evidence

1. Cybersecurity firm discovers Chinese spyware operating in 13 countries
2. Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
3. COLDCARD security audit phishing attack installs remote access tool
4. CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
5. Epic Disaster: AI Finds a ColdCard Wallet Vulnerability in Just 8 Minutes Because Engineers Took Shortcuts in the Code

中文