Cybercrime Carnage: Cryptocurrency-Targeting Attacks Abound

[ad_1] <div id=""> <a target="_blank" href="https://www.bankinfosecurity.com/cryptocurrency-fraud-c-574" id="asset_topic_1_1" rel="noopener">Cryptocurrency Fraud</a> , <a target="_blank" href="https://www.bankinfosecurity.com/cybercrime-c-416" id="asset_topic_1_2" rel="noopener">Cybercrime</a> , <a target="_blank" href="https://www.bankinfosecurity.com/cyberwarfare-nation-state-attacks-c-420" id="asset_topic_1_3" rel="noopener">Cyberwarfare / Nation-State Attacks</a>

From Cryptojacking to Change Hacks to Rip-off Token Contracts, Innovation Abounds <a target="_blank" class="author-link" href="https://www.bankinfosecurity.com/authors/mathew-j-schwartz-i-892" rel="noopener">Mathew J. Schwartz</a> (<a target="_blank" href="https://www.twitter.com/euroinfosec" rel="noopener">euroinfosec</a>)

• November 25, 2022 <a target="_blank" href="https://www.bankinfosecurity.com/blogs/cybercrime-carnage-cryptocurrency-targeting-attacks-abound-p-3322#disqus_thread" rel="noopener">

<figure> <img src="https://4a7efb2d53317100f611-1d7064c4f7b6de25658a4199efb34975.ssl.cf1.rackcdn.com/cybercrime-carnage-cryptocurrency-targeting-attacks-abound-showcase_image-10-p-3322.jpg" alt="Cybercrime Carnage: Cryptocurrency-Targeting Attacks Abound" class="img-responsive"/> <figcaption>Photo: <a target="_blank" href="https://www.flickr.com/photos/joncutrer/51129907927/" rel="noopener">Jonathan Cutrer</a> through Flickr/CC</figcaption> </figure> Whereas the cybercrime story for 2022 has but to be totally written, cryptocurrency theft will little doubt have a starring function. Buoyed by the collective pilfering of billions of {dollars}' price of cryptocurrency already this 12 months, stealing extra will little doubt be a prime New Yr's decision for the criminally inclined.See Additionally: <a target="_blank" href="https://www.bankinfosecurity.com/webinars/live-webinar-how-to-meet-your-zero-trust-goals-through-advanced-w-4371" rel="noopener">Live Webinar | How To Meet Your Zero Trust Goals Through Advanced Endpoint Strategies</a>  Illicit curiosity in cryptocurrency continues regardless of fallout from the <a target="_blank" href="https://www.bankinfosecurity.com/interviews/cybersecurity-analysis-ftx-crypto-heist-part-one-i-5180" rel="noopener">crash and burn of cryptocurrency exchange FTX</a>, which on Nov. 11 filed for chapter.  Cue the worth of a bitcoin plunging from a excessive this month of over $21,000 all the way down to a low this week of $15,500, which is what it was price about three years in the past. However that's nonetheless numerous worth, particularly for attackers who're in a position to steal Bitcoin, Monero, Ether and different cryptocurrency and use money-laundering ways to transform it to a fiat foreign money.  Depend FTX amongst latest victims. The alternate itself was ransacked by attackers - many market watchers suspect insider involvement - because it was collapsing, with FTX tokens then price $400 million <a target="_blank" href="https://www.bankinfosecurity.com/unauthorized-transactions-lead-to-missing-funds-at-ftx-a-20463" rel="noopener">going missing</a>. On Sunday, blockchain evaluation agency <a target="_blank" href="https://twitter.com/chainalysis/status/1594349583416840199" rel="noopener">Chainalysis</a> reported that the attacker transformed about $60 million price of stolen funds through the decentralized renBTC bridge, which can be utilized purchase bitcoins, which had been "prone to be combined previous to a cash-out try" (see: <a target="_blank" href="https://www.bankinfosecurity.com/interviews/cybersecurity-analysis-ftx-crypto-heist-part-one-i-5180" rel="noopener">Cybersecurity Analysis of the FTX Crypto Heist</a>).  <img class="img-responsive" src="https://dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com/files/images_articles/etherscan-25nov2022.jpg"/><figcaption class="bot20">Current transactions for a cryptocurrency pockets allegedly tied to the theft of FTX account balances (Supply: <a target="_blank" href="https://etherscan.io/address/0x59abf3837fa962d6853b4cc0a19513aa031fd32b" rel="noopener">Etherscan</a>)</figcaption>   Whoever attacked FTX continues to try to money out. "Blockchain knowledge from Etherscan reveals {that a} crypto account related to the FTX exploiter moved a complete of 180,000 ether - price roughly $200 million at present costs - to 12 crypto wallets Monday," <a target="_blank" href="https://www.coindesk.com/markets/2022/11/21/ftx-exploiter-transfers-200m-in-ether-to-various-crypto-wallets/" rel="noopener">CoinDesk</a> reviews. As of Friday, these efforts had been persevering with.   <h3>Crypto Criminals Want Trickery</h3> Setting apart the FTX instance, direct concentrating on of cryptocurrency exchanges is commonly the province of nation-state assault teams . This is you, <a target="_blank" href="https://www.bankinfosecurity.com/biden-administration-vows-crackdown-on-illicit-crypto-a-20090" rel="noopener">North Korea</a>.  Criminals working with out nation-state affiliation, nevertheless, have been "extra prone to hunt for cryptocurrency utilizing phishing, providing doubtful cryptocurrency alternate platforms and launching cryptojacking to illicitly mint cryptocurrency," cybersecurity agency <a target="_blank" href="https://securelist.com/crimeware-financial-cyberthreats-2023/108005/" rel="noopener">Kaspersky</a> reviews.  Cryptojacking refers to utilizing malware that quietly squats on techniques and makes use of its computational energy to mine for cryptocurrency, which includes fixing computationally intensive duties in return for an opportunity to obtain free cryptocurrency as a reward. As Western legislation enforcement businesses have labored to disrupt ransomware operations, cryptojacking is once more scorching, and this time at scale (see: <a target="_blank" href="https://www.bankinfosecurity.com/weary-cybercriminals-turn-to-cryptojacking-banks-report-a-19669" rel="noopener">Weary Cybercriminals Turn to Cryptojacking Banks: Report</a>).  "Beforehand, mining was largely a risk for basic customers, however right this moment miners are stealing energy from massive companies and significant infrastructures," Kaspersky reviews. "Even huge ransomware operators - for instance, AstraLocker - are shutting down their operations to modify to cryptojacking."  Stealing cryptocurrency outright additionally stays a favourite tactic of attackers. However centralized exchanges are not attackers' prime goal; DeFi protocols have seized that mantle. In October alone, blockchain evaluation agency Chainalysis reported that 11 assaults had resulted in <a target="_blank" href="https://twitter.com/chainalysis/status/1580312145451180032" rel="noopener">the theft of $718 million</a> from DeFi protocols.  "At this fee, 2022 will doubtless surpass 2021 as the most important 12 months for hacking on report," <a target="_blank" href="https://twitter.com/chainalysis/status/1580312145451180032" rel="noopener">Chainalysis</a> reported. "To date, hackers have grossed over $3 billion throughout 125 hacks."  <h3>From Rug Pulls to Rip-off Token Contracts</h3>  Scams additionally persist, together with the rug pull. This includes debuting a brand new sort of cryptocurrency, operators amassing funds from buyers, then freezing trades and stealing the entire funds invested. Among the best-known alleged rug pulls concerned the Squid Recreation token, and its builders in November 2021 apparently working away with <a target="_blank" href="https://www.bbc.co.uk/news/business-59129466" rel="noopener">$3.4 million</a> in buyers' funds.  One rising cryptocurrency risk is the rip-off token sensible contract. Final month, <a target="_blank" href="https://www.businesswire.com/news/home/20221027005148/en/Solidus-Labs-Unveils-First-of-its-kind-Web3-AML-Solution-Flagging-Close-to-200000-Rug-Pulls-and-Smart-Contract-Scams-That-Make-Up-8-of-All-Ethereum-Tokens" rel="noopener">Solidus Labs</a>, which sells anti-fraud and anti-money laundering instruments for Web3 purposes, warned that along with "rug pulls, phishing assaults and token impersonations," it had seen a surge in rip-off token contracts, that are "cryptocurrencies which have been hard-coded to steal buyers' funds."  "Rip-off token contracts could be routinely deployed and simply repeated, permitting serial scammers to quickly execute hundreds of small worth assaults with out elevating pink flags amongst regulated exchanges, regulators and legislation enforcement," the corporate warns, estimating that it sees 15 new scams of this sort debut each hour.  As we head into a brand new 12 months, count on cryptocurrency-targeting assaults and schemes to turn into "extra superior and widespread," Kaspersky warns.  "We consider that customers are actually rather more conscious of crypto and won't fall for primitive scams, comparable to a video that includes an Elon Musk deepfake promising big returns in a dodgy cryptocurrency funding scheme that <a target="_blank" href="https://twitter.com/elonmusk/status/1529484675269414912" rel="noopener">went viral</a>." As an alternative, it says, count on to see an increase in better-crafted - however pretend - preliminary coin choices and non-fungible tokens, in addition to malicious sensible contracts.  For criminals who function on-line, time is cash. If an assault has been working, it is a no-brainer that criminals will <a target="_blank" href="https://www.bankinfosecurity.com/blogs/ransomware-ecosystem-big-name-brands-becoming-liability-p-3257" rel="noopener">refine the business model</a>, looking for to spice up their income much more, whereas making an attempt to remain one step forward of defenders. As innovation abounds, the message for cryptocurrency customers - to not point out anybody with infrastructure on which cryptojacking malware would possibly take maintain - ought to stay clear: watch out for criminally inclined cryptocurrency fanatics and schemes.

</div><script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script> [ad_2] <a href="https://news.google.com/__i/rss/rd/articles/CBMiaGh0dHBzOi8vd3d3LmJhbmtpbmZvc2VjdXJpdHkuY29tL2Jsb2dzL2N5YmVyY3JpbWUtY2FybmFnZS1jcnlwdG9jdXJyZW5jeS10YXJnZXRpbmctYXR0YWNrcy1hYm91bmQtcC0zMzIy0gEA?oc=5">Source link </a>