At midnight ET last night, MyEtherWallet users started noticing something odd. Connecting to the service, users were faced with an unsigned SSL certificate, a broken link in the site’s verification. It was unusual, but it’s the kind of thing web users routinely click through without thinking.
But anyone who clicked through this certificate warning was redirected to a server in Russia, which proceeded to empty the user’s wallet. Judging by wallet activity, the attackers appear to have taken at least $13,000 in ethereum during two hours before the attack was shut down. The attackers’ wallet already contains more than $17 million in ethereum.
MyEtherWallet confirmed the attack in a statement on Reddit. “We are currently in the process of...
from
https://www.theverge.com/2018/4/24/17275982/myetherwallet-hack-bgp-dns-hijacking-stolen-ethereum
from
https://ifeeltechinc.blogspot.com/2018/04/hackers-emptied-ethereum-wallets-by.html
No comments:
Post a Comment