Nobitex Breach: Infostealers Expose Critical Employee Credentials in Latest Crypto Exchange Hack

**Executive summary:** Nobitex, an Iranian cryptocurrency exchange, sustained an $81.7M loss after attackers (claiming responsibility as "Gonjeshke Darande") leveraged infostealer infections on two employees to exfiltrate webmail, administrative, testnet, JIRA credentials and session cookies that facilitated access to hot wallets; cold storage remained secure. Hudson Rock's analysis links the compromises to StealC and Redline infections and highlights infostealers as common precursors to high-value crypto exchange breaches, recommending stronger endpoint security, MFA, credential audits, and employee training.