North Korean Hackers Attempt to Breach an Online Gambling Firm

• Hackers used deepfakes in a spoofed Zoom meeting
• Victim ran fake support script that installed malware
• Attackers stole credentials, crypto data, and messaging info

---

A representative from a Canadian online gambling provider was duped into believing they were on a routine Zoom call. In reality, they were communicating with North Korean hackers using a spoofed version of the communications platform.

This attack, which originated on May 28, was executed by BlueNoroff, a subgroup of the infamous North Korea-backed hacking group, Lazarus Group, as reported by analysts from Field Effect Analysis.

Deep Fake Technology in Action

According to Field Effect, the hackers designed a counterfeit website masquerading as an official Zoom support page to ensnare the targeted gambling company. By using deepfake technology, they successfully imitated a legitimate business contact to arrange the Zoom meeting.

Once activated, the malware initiated a series of downloads and commands that ultimately prompted the victim for their system credentials, silently installing multiple malicious payloads. This breach allowed the hackers access to a wide range of sensitive personal and system-related data, focusing heavily on cryptocurrency assets and messages.

This specific incident appears to be a part of a larger Zoom spoofing campaign, which was first documented in March 2025 and has predominantly targeted cryptocurrency firms, as highlighted by Field Effect.

“This demonstrates an ongoing trend where profit-driven hackers refine their methods, embedding malice within trusted business environments and exploiting user reliance as a key attack point,” the analysts reported.

Historical Context: The Bangladesh Bank Heist

BlueNoroff’s most notorious operation occurred in February 2016, wherein they successfully infiltrated the Bangladesh Bank’s servers. This breach granted them the credentials necessary to authorise 35 fraudulent transfer requests from the New York Federal Reserve, amounting to nearly $1 billion.

Of the 35 payments, US$101 million was processed before suspicions arose at the New York Fed, effectively stopping any further transactions.

Approximately $20 million was recovered and returned to Sri Lanka, but the majority of the funds were laundered through multiple accounts at the Philippine bank RCBC, swiftly opened under fictitious names, and subsequently converted into cash at VIP casino gaming tables, ultimately disappearing without a trace.

This troubling trend raises significant concerns about the security measures in place across the online gambling sector, particularly as cybercriminals continue to evolve and adapt their strategies.

For online gambling companies, staying informed about the latest cyber threats and implementing robust cybersecurity measures is crucial. Cybersecurity resources, continuous employee training, and incident response plans can help mitigate potential attacks.

In summary, this case highlights the increasing sophistication of cyber threats facing the online gaming industry, showcasing the need for ongoing vigilance and proactive measures to protect sensitive information.

Oklahoma AG Invalidates Tribal Gaming Compact

Key Highlights:

• Oklahoma’s Attorney General declares a tribal gaming compact invalid
• The United Keetoowah Band (UKB) seeks to resume gaming operations
• UKB submitted a Class III gaming compact to the federal government in April

---

Oklahoma Attorney General Gentner Drummond announced that the Class III gaming compact, signed by the United Keetoowah Band (UKB) of Cherokee Indians and submitted to the United States Department of the Interior for federal approval, is invalid.

In April, the UKB completed and signed Oklahoma’s Model Tribal Gaming Compact. This compact allows federally recognised tribes to operate slot machines and live dealer table games on their sovereign reservations, having been approved by state voters in a referendum held in 2024.

However, Part 15 of the Model Tribal Gaming Compact specifies that tribes must have executed the contract with the state and federal government before January 1, 2020. A total of 35 tribes met this deadline, thereby securing automatic renewals of their Model Tribal Gaming Compacts for successive 15-year terms, though the governor has the right to request negotiations for new terms.

UKB Compact Dead on Arrival, AG Says

In his interpretation of the compact at the UKB’s request, Drummond concluded that the compact is invalid since it was signed after January 1, 2020.

“The April 29, 2025, execution of Oklahoma’s statutory model gaming compact by the United Keetoowah Band of Cherokee Indians did not create a valid agreement between the State of Oklahoma and the UKB. The Model Compact term expired on January 1, 2020,” Drummond stated.

According to Drummond, tribes like the UKB that did not enter into a Model Compact before 2020 now need to negotiate individual compacts with the state. This negotiation should begin with the Joint Committee on State-Tribal Relations.

“The UKB did not seek approval of the compact which the UKB signed on April 29, 2025, by the Joint Committee on State-Tribal Relations. Thus, the UKB has not entered a valid gaming compact with the State of Oklahoma,” Drummond concluded.

Cherokee Infighting

The UKB did not sign the Model Tribal Gaming Compact by the 2020 deadline due to uncertainties regarding its federal status. Recently, with the Department of the Interior’s (DOI) Bureau of Indian Affairs ruling in favor of recognizing the UKB as an equal successor to the Old Cherokee Nation, complications arose.

UKB Chief Jeff Wacoche criticized Drummond’s legal opinion, accusing him of bias towards the larger and more politically influential Cherokee Nation.

“The fact that the attorney general would issue a legal opinion that addresses the UKB without proper consultation reflects the political influence of the Cherokee Nation,” Wacoche stated.

Conversely, Chuck Hoskin Jr., chief of the Cherokee Nation, responded to these assertions, asserting their sovereign authority as the Cherokee Nation over a vast 7,000 square-mile reservation in Oklahoma.

In conclusion, the invalidation of the UKB’s gaming compact raises significant concerns about tribal rights and the future of gaming operations under such legal circumstances.

Summary: Oklahoma AG Gentner Drummond has declared the gaming compact signed by the UKB as invalid, setting off a legal dispute over tribal gaming rights. The UKB faces challenges in formalizing its gaming operations due to the timing of its compact submission. This situation has ignited tension between the UKB and the Cherokee Nation, emphasizing the complex dynamics at play in the tribal gaming landscape.

Coinbase Scammer Gambled at Crypto Casinos, Bought Rolexes

• Investigator reveals culprit allegedly stole $4 million in Coinbase scam
• Bad actor gambled away some of the money at crypto casinos
• He bought luxury items, including Rolex watches

---

Christian “Daytwo” Nieves has gained notoriety as the alleged mastermind behind a $4 million fraud scheme that defrauded investors of their digital currency. Reportedly, much of this stolen money ended up in cryptocurrency casinos, according to an in-depth investigation.

The investigation, led by ZachXBT on social media, disclosed how Nieves and his accomplices operated a social engineering scam. They impersonated employees of Coinbase, the leading cryptocurrency exchange in the US, convincing victims to create accounts under the pretense of safeguarding their assets while actually directing them to phishing sites for illicit gain. This tactic allowed them access to victims’ private keys, resulting in the loss of digital assets without any recompense for the victims.

ZachXBT reported that the ill-gotten gains were distributed in three directions, with a portion funneled into Roobet, a crypto casino. He also mentioned that Roobet, like other crypto casinos, operates without proper licensing or regulation in the US and is banned in many significant gaming markets, including Australia and Canada.

Coinbase Scammer Made Mistakes While Trying to Cover Tracks

In a typical fashion for financial fraudsters, Nieves made it easy for investigators by not adequately concealing his activities. He documented his gambling ventures on Roobet, where he was identified by the username “pawsonhips” and frequently showcased his luxury purchases, including Rolex watches, on social media platforms.

Investigators uncovered evidence linking Nieves’ Roobet deposit address to more than 30 suspected thefts, suggesting a wide-ranging fraud scheme.

“I anticipate there are many additional victims I cannot directly associate. While some activity overlaps with other offenders, most of it relates to Nieves,” noted the investigator.

The driving force behind Nieves’ orchestrated fraud may be a compulsive gambling addiction, as suggested by ZachXBT. This places Nieves among a long list of criminals engaging in unethical practices to support gambling habits.

“Daytwo has a gambling problem, and a review of his casino deposits shows dwindling numbers as he loses funds. Recently, he has resorted to stealing from his partners as well,” observed ZachXBT.

The Role of Monero in Uncovering Criminal Activity

While Monero ranks as only the 22nd largest cryptocurrency by market cap, it is regularly connected to criminal enterprises due to its privacy-focused design that obscures user transaction details. Unlike Bitcoin, which provides transparency, Monero’s features complicate tracking efforts. This fact makes it remarkable that ZachXBT could trace Nieves’s dealings back to the fraud committed against Coinbase.

It’s important to clarify that Monero wasn’t created to facilitate illegitimate activities; its popularity is largely rooted in its robust privacy features. However, as regulatory scrutiny increases, some exchanges are starting to remove it from their platforms, potentially driving bad actors back to Bitcoin.

In summary, Nieves’ case sheds light on the intersection of cryptocurrency scams and the gambling world, exemplifying the vulnerabilities within digital transactions and the destructive impacts of gambling addiction.

Casino Closures: Macau Businesses Sound Alarm Over Fallout

Key Highlights:

• Thousands of jobs risked by satellite casino shutdowns
• ZAPE businesses warn of severe economic consequences
• Government urged to support non-gaming district revival

---

Business owners in Macau are raising alarms over a potential economic crisis as a minimum of nine satellite casinos are slated for permanent closure. These closures, expected to occur by December 31, 2025, jeopardize approximately 6,000 jobs in the region’s gambling sector.

The satellite casinos have been operating under the licenses of Macau’s six concessionaires since 2002. However, recent regulations have led to dwindling revenues, prompting the government to push for consolidation within the industry.

Business owners have voiced concerns regarding the severe economic ramifications of the closures, which many believe the government has significantly underestimated.

Industry Shake-Up

The impending closures come after a grace period established by Macau’s updated Gaming Law, requiring satellite casinos to close or be acquired by primary license holders.

Numerous local establishments — including restaurants, retail shops, and service providers — depend heavily on the consistent flow of casino workers and patrons. This decline in foot traffic results in substantial economic hardship.

New Nightlife District?

The Industry and Commerce Association of Macau ZAPE is urging government intervention to negotiate with SJM for the continuity of these satellite operations. As part of their license agreement, SJM and the other concessionaires must exhibit social responsibility and assist local businesses.

There are proposals from the business coalition advocating for the creation of a vibrant non-gaming nightlife area in ZAPE, focused around entertainment that includes dining options and leisure activities.

With close to 6,000 jobs and numerous local businesses at stake, the situation remains tense as stakeholders await meaningful government action and support.

Quick Facts:

• The affected businesses strongly rely on casino traffic.
• Six casinos in the ZAPE district face permanent closure.
• The government’s reform aims to modernize the gaming landscape.

Summary: The closure of several satellite casinos in Macau poses a significant threat to local businesses and employment, prompting business owners to call for immediate government action to mitigate the potential economic fallout. The implications of these closures highlight the importance of local businesses, which have historically relied on a steady influx of visitors and employees connected to the casino industry.

How the 13 Hotel Crisis Impacted the Macau Gaming Industry and its Financial Landscape

The 13 Hotel in Macau has made headlines recently as it changes hands after struggling financially. The identity of the new owner remains unknown, with reports suggesting the transaction occurred amidst a challenging backdrop for the hotel’s operations.

Located just south of the bustling Cotai Strip, The 13 Hotel has transitioned ownership after its latest auction round. The auction, which began in mid-May, culminated in the sale of this once ultra-luxury hotel that has been on the brink of bankruptcy. Renowned global real estate broker, Jones Lang LaSalle, facilitated this complex transaction, which still awaits approval from governmental bodies.

The staggering sale price was only HK$400 million (approximately US$50.1 million) — a significant reduction from its initial market listing of HK$2.4 billion (about US$307 million) in March 2024. Much to the dismay of its investors, The 13 Hotel reopened in July with limited services, as many of its facilities remained closed, including its two restaurants.

Background: Financial Catastrophe

The story of The 13 Hotel is rooted in the rapid economic transformation of Macau following its return to Chinese sovereignty in 1999. The region became a global gaming hub, with annual gaming revenues soaring from AUD 2.7 billion in 1999 to a then-record peak of AUD 60 billion in 2013.

• Stephen Hung’s Vision: Aiming to build the world’s most extravagant hotel.
• Investment Failures: Hung’s dream came with a price; he invested heavily, including US$20 million on 30 luxury Rolls-Royce Phantoms for guests.
• Junket Crackdown: The Chinese government’s crackdown on junket operators significantly impacted high roller tourism, causing a sharp decline in revenue.

As casino revenue began to fall, Hung liquidated much of his personal wealth to keep the hotel afloat, but ultimately, South Shore Holdings, the company behind The 13, succumbed to bankruptcy before the hotel even began operations.

Future of The 13 Hotel

The future remains uncertain for The 13 Hotel. Despite its five-star rating from the Macau SAR Government, consumer reviews indicate a lukewarm response. Guests express disappointment, with comments like:

“The building looks nice, but the place feels closed down.”

“I waited for a Rolls-Royce pickup from the ferry terminal but was instead picked up in a Toyota.”

It’s unclear what the new owner has in mind for The 13, but many hope for a revival of this once-promising property, bringing back its luxurious reputation to attract visitors back to Macau.

Key Takeaways

• The 13 Hotel’s sale price reflects a drastic devaluation from its previous market listings.
• The hotel was heavily influenced by changing political and economic landscapes in the region.
• Reviews suggest a big gap between expectation and actual guest experiences.

Conclusion

As Macau continues to adapt to shifting economic conditions, the sale and future of The 13 Hotel embody both the challenges and opportunities within the gambling and hospitality sectors. With its new ownership, the hope is that The 13 can redefine itself and regain a foothold in the competitive landscape of Macau’s gaming industry.