NGRAVE users lose $2.65 million in phishing attack exploiting LIQUID app notifications

Hackers stole approximately $2.65 million from 84 cryptocurrency wallets by compromising NGRAVE's LIQUID companion app push notifications in an Oct. 17 attack. The fraudulent messages falsely warned users their portfolios had been synchronized with a Pixel 9 device in Moscow, directing victims to enter recovery phrases or NGRAVE Perfect Keys. Attackers drained about $1.76 million in Bitcoin from 21 wallets and moved proceeds across multiple blockchains, eventually purchasing $2.16 million worth of XMR tokens tracked to Monero's price. As of Oct. 19, the XMR tokens remained unsold and unwrapped in identifiable accounts.