Chinese Crypto Hacking Group's Covert Operations Exposed in $7 Million Dispute

A recent internal dispute within a Chinese cryptocurrency hacking group has led to the exposure of their clandestine activities, shedding light on the group's sophisticated tactics used to steal digital assets worth approximately $7 million.

The group, operating under the guise of a legitimate security firm, Wuhan Anxun Science and Technology, systematically targeted crypto wallets through supply chain attacks. The leaked documents reveal a highly organized structure with clear divisions of labor, including teams focused on target research, tool development, and asset laundering.

The group's primary target was Trust Wallet, a popular non-custodial wallet, which they compromised using automated mass collection of mnemonic phrases. This technique involved scanning infected systems for data patterns matching the phrase structure used by Trust Wallet and similar applications.

The leaked information highlights advanced attack methods, including reverse-engineering plugins, memory scraping, clipboard hijacking, and fake node attacks. These tactics allowed the group to cast a wide net with a single intrusion point, compromising numerous users who installed compromised software.