KelpDAO suffers $290 million heist tied to Lazarus hackers
2026-04-21T01:23:35Z•bf4b67261daa7e97070ba4787cdcaa3ead52b9446c202445b900fb7ec867c577
Apple App StoreApple account alertsApple phishingCoinbaseDeFiGentlemen ransomwareKelpDAOLazarusMetamaskMicrosoft TeamsNIST policy change','Protobuf.js','critical RCE','zero‑day','PoCNorth KoreaOneKeySeikoSystemBCTrust WalletVercel breachbotnetcrypto‑heistdata thefthelpdesk impersonationlegitimate tools abusemalicious iOS appsseed phrase theftwebsite defacement
What happened
A collection of BleepingComputer reports (Apr 18–20, 2026) covering multiple high-impact security events: a $290M DeFi heist against KelpDAO attributed to North Korean Lazarus actors; 26 malicious iOS wallet apps on China's Apple App Store stealing seed/recovery phrases; the Gentlemen ransomware gang leveraging a >1,570‑host SystemBC botnet; Seiko USA website defacement and alleged customer data theft; growing abuse of Microsoft Teams for helpdesk‑impersonation and lateral movement; Vercel confirming a breach with stolen data being offered for sale; Apple account change notifications being rep
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- bf4b67261daa7e97070ba4787cdcaa3ead52b9446c202445b900fb7ec867c577
- Enrichment time
- 2026-04-21T01:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.