Hacking News
KuCoin Account Stolen via Password Phishing
An experienced crypto investor received an official-looking email from his exchange, KuCoin, asking him to log in and verify his account security. He entered his username and password without hesitation, but within minutes, hackers had broken into his account and stolen thousands of dollars in digital assets. The incident highlights the vulnerability of passwords, as users often reuse them across different platforms, making them easy targets for hackers who use credential stuffing and brute-force attacks. The article explains that Passkey, a new security feature, uses domain-bound credentials and biometric authentication to protect users' accounts from phishing and other modern threats.