Ngrave says $2.56 million in crypto stolen after fake app alerts targeted users

Belgian hardware wallet provider Ngrave reported that cybercriminals stole approximately $2.56 million in cryptocurrency from users of its LIQUID companion app, after attackers took control of a third-party notification provider. The incident was officially disclosed by the company on October 19. The breach began on October 17 when threat actors gained access to the system Ngrave used to send push notifications for its LIQUID app. They sent fraudulent security alerts to users, warning that their portfolios had allegedly been synced with a Pixel 9 device in Moscow.