Posts

Showing posts with the label hack

Australian exchange CoinSpot reportedly hacked for $2m

A blockchain analyst under the pseudonym ZachXBT reported suspicious transactions from the wallets of the Australian exchange CoinSpot totaling $2 million. In his Telegram channel, blockchain detective ZachXBT pointed out two transactions. First, the attackers withdrew 1,262 Ethereum (ETH) and then another 20.99 ETH. The stolen funds were exchange d for Wrapped Bitcoins (WBTC) and stablecoins USDC and USDT. To do this, the attackers directly used the decentralized exchange Uniswap, the THORChain protocol, and the WBTC smart contract. CoinSpot exchange was founded in 2014, and so far, no incidents related to information security have been recorded on it. At the moment, representatives of the site have not confirmed the hack. The company’s website emphasizes that CoinSpot “maintains the highest security standards by storing the majority of assets in a cold wallet.” You might also like: Hackers exploit Onyx Protocol for $2.1m In October, hackers managed ...

'EtherHiding’ hack uses Binance blockchain to extort WordPress users

Researchers at Guardio Labs have discovered a new attack known as ‘EtherHiding,’ which uses Binance Smart Chain and Bullet-Proof Hosting to serve malicious code within victims’ web browsers. Unlike an earlier suite of fake update hacks that exploited WordPress, this variant uses a new tool: Binance’s blockchain . Earlier, non-blockchain variants interrupted a webpage visit with a realistic-looking, browser-styled ‘Update’ prompt. A victim’s mouse click installed malware. Due to the cheap, fast, and poorly policed programmability of Binance Smart Chain, hackers can serve a devastating payload of code directly from this blockchain. To be clear, this is not a MetaMask attack. Hackers simply serve malicious code inside victims’ web browsers that looks like any webpage that the hacker wants to create — hosted and served in an unstoppable manner. Using Binance’s blockchain to serve code, hackers attack victims for various extortion scams. Indeed, EtherHiding ...