Skip to main content

Where crypto hackers might attack - and how to protect yourself

 


The fear is great: A cyber war is looming between Russia and the West. Politicians, experts and authorities are alarmed. Just last week, US President Joe Biden warned of Russian cyber army attacks: “They will come.” The cybersecurity industry is in turmoil . There is "more fear than ever before," explained expert Jonathan Reiber at a conference in March. The crypto world is also a battlefield in this cyber war .


Hacks have rocked the space for years. Centralized crypto exchanges and decentralized finance (DeFi) service providers are particularly vulnerable. Data service provider Chainalysis estimates that over $12 billion in cryptocurrencies were stolen by hackers there in 2021 alone. And today, March 30, 2022, hackers made off with over $600 million from the log of blockchain game Axie Infinity . It was the worst hack ever in the DeFi space . Which targets could be targeted by hackers in a cyber war between the West and Russia? How great is the risk for small investors - and what is the best way to protect themselves?


Shortly after Russia's invasion of Ukraine began, the hacker collective Anonymous declared cyberwar on the Kremlin. It attacked Russian state media such as Russia Today and Russ.ru, shutting down their websites and displaying anti-war messages. Two weeks ago, Anonymous stole 20 terabytes of data from a German subsidiary of the Russian energy company Rosneft. Concerns about imminent retaliatory strikes are growing.


Russian hackers steal bitcoin

Because in the course of these attacks, one of the most notorious Russian hacker groups declared its “full solidarity” with Moscow. Her name is Conti. The FBI counts over 400 attacks on US companies alone, some on critical infrastructure. The Russian hackers from “Conti” also use sophisticated computer viruses, so-called Trojans, to steal user data – and Bitcoin.

Over 65,000 are in the war chest of their leaked crypto wallet, which is equivalent to more than two billion US dollars. The company Chainalysis has been tracking hackers and money launderers in the crypto space since 2014 and estimates that more than 700 million US dollars have been laundered in Moscow with these stolen Bitcoins in the last three years.


In a war with such severe economic implications, DeFi service providers’ crypto exchanges and protocols could soon become honeypots for the hackers, Modulus CEO Richard Gardner told BTC-ECHO. His company has been developing software for financial service providers such as NASDAQ since 1997, including security tools. "They break in there and steal what they need to fund the war." North Korean hackers have been doing this for a number of years. They, too, are stepping up their activities according to the latest reports from US cybersecurity firms.


Anonymous may soon target crypto exchanges and DeFi protocols serving Russian operations. Russian hackers, in turn, could target crypto exchanges that route crypto donations to Ukraine, Gardner said. To date, nearly $100 million in donations have been raised in this way.


Cyber ​​War and the Aftermath

Betsy Bevilacqua, chief of cybersecurity at Chainalysis, warns of possible “collateral damage” in hacking attacks on Ukraine. "That's my biggest concern," she tells BTC-ECHO. “We saw something like this before in 2017. At that time, hackers attributed to Russia attacked Ukraine's financial system with a Trojan. However, the malware quickly spread worldwide and caused global damage of around ten billion US dollars - one of the most destructive cyber attacks in history."


Both experts agree: the exchanges and DeFi service providers should be on high alert in the coming months. And also the users. “If you are personally involved in cryptocurrencies, you should rather use a hardware wallet,” recommends Richard Gardner. Such hardware wallets are physical devices on which cryptocurrencies are stored, often USB sticks. They cost a few hundred euros and are relatively easy to set up.


The difference to other forms of storage: Hardware wallets are not permanently connected to the Internet, so they are considered “cold”. This guarantees the highest possible security compared to a classic private wallet or storage on crypto exchanges and in DeFi protocols. These are vulnerable to hacks and phishing attacks. 

My Top Picks
Honeygain - Passive earner that pays in BTC or PayPal
MandalaExchange -The Best no KYC crypto Exchange! 
BetFury - Play And Earn BFG for daily Bitcoin and ETH dividends!
Pipeflare - Faucet that pays in ZCash and Matic, Games pay in DAI
Womplay - Mobile dApp gaming platform that rewards in EOS and Bitcoin
Cointiply - The #1 Crypto Earning Site
Torum - Join the latest Social Network and earn TRM for Free! 
LiteCoinPay - The #1 FaucetPay earner for Litecoin 
LBRY/Odysee - YouTube Alternative that lets you earn Money by viewing videos!
FaucetPay - The #1 Microwallet Platform
FREEBTC - The #1 FaucetPay earner for Satoshi's
FaucetCrypto - An earning/faucet site that pays out instantly
FireFaucet - An earning site that pays better for some than Cointiply
DogeFaucet - Dogecoin Faucet
xFaucet - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BCH, BNB, ZEC, FEY - Claim every 5 minutes
Konstantinova - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BNB, ZEC, USDT, FEY, 25 Claims Daily

Comments

Popular posts from this blog

From offchain to offchain: Statechains meets Lightning

  Without a doubt, the most significant off-chain Bitcoin solution is the Lightning network. But in its wake, the statechain has emerged as an intriguing replacement. There is currently a proposal to link the two offchain networks. From an ocean, for example, you can see sunbeams glistening in the water, waves rippling, and possibly a jellyfish drifting toward the light. But you only see a small portion of it. The distance from the sea's surface to its bottom is hundreds of meters. It has dozens of different fish species swimming in it, crabs and starfish crawling on the bottom, shells clinging to rocks, and sea plants climbing up. A completely new world starts where your gaze diverges. You can picture a blockchain like Bitcoin, just like the sea. What you see on the outside is only a small portion of what is actually there; the set of UTXOs (coins) and transaction history that full nodes store are just the beginning of a much larger world. It's the plan, at least. With Bitcoin...

Phishing attack on popular crypto sites tries to empty wallets

  Several major crypto sites such as Etherscan, CoinGecko, DeFi Pulse, and others report malicious pop-ups scammers use to try to trick users into connecting their MetaMask wallets. The phishing attack came from a domain displaying the Bored Ape Yacht Club (BAYC) logo. "We are investigating the root cause of this attack to fix the threat as soon as possible," CoinGecko founder Bobby Ong tweeted. The phishing attack appears to have been triggered by a malicious ad script from Coinzilla, a crypto ad network, according to CoinGecko. Etherscan also advises its users not to confirm any transactions that may appear on the website. The attackers attempted to use the hype around the “bored monkeys” non-fungible tokens (NFT) to gain access to the cryptocurrencies of unsuspecting website visitors. Although the websites affected by the scam attempt have reacted in the last few hours and deactivated the advertising pop-up, it is still recommended not to connect your MetaMask wallet to ne...

Bored Ape Yacht Club NFTs stolen through phishing on Instagram

  Bored Ape Yacht Club ( BAYC ) developers announced on Monday that hackers have hijacked the official Instagram page of the popular NFT collection and posted links to a fake airdrop. Crypto enthusiasts who connected their MetaMask wallet to the rogue website subsequently had their Ape NFTs stolen. Apparently, the attack was planned to coincide with the one-year anniversary of the BAYC collection. This increased the "perceived credibility" of the phishing link. About 100 NFTs are said to have been stolen in the phishing attack . According to CoinGecko data , the minimum price for a BAYC NFT is 139 Ether ( ETH ) or $400,726. So if reports are correct, over $40 million worth of NFTs were stolen in the attack. These numbers are only the lowest estimate, however, as they are based on the lowest price.  At the time of writing, it was still unclear how the hackers gained access to BAYC's official Instagram account. Social media users have pointed out the importance of two-fact...