CoinsPaid

Read

/send

<div class="protos"> 
 <div> 
  <div> 
   <div> 
    <p>A July hack that siphoned nearly $40 million from CoinsPaid, one of the world’s biggest <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> payment providers, was reportedly triggered by a fake 40-minute job <a rel="noopener noreferrer nofollow" title="interview" href="https://thebittimes.com/tag/interview.html">interview</a>.</p> 
    <p>Hackers working with infamous North Korean cybercrime collective Lazarus apparently spent months probing the Estonia-based firm’s systems and security before launching the attack.</p> 
    <p>As reported by Bloomberg, the hackers posed as a recruiter and reached out to a CoinsPaid employee with a tempting job offer, supposedly on behalf of Singapore-based exchange <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a>.com. During the <a rel="noopener noreferrer nofollow" title="interview" href="https://thebittimes.com/tag/interview.html">interview</a>, the employee, instructed by the fake recruiter, downloaded a malicious file onto his work computer, believing he was about to take a technical test.</p> 
    <p>Instead, money started to disappear from the CoinsPaid platform and <strong>despite the firm shutting down the hackers within a few hours, $37 million had already been leeched from its <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> wallets</strong>.</p> 
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos"> 
     <div class="wp-block-embed__wrapper"> 
      <blockquote class="wp-embedded-content" data-secret="pr47ACxgKq">
        US-based JumpCloud hacked by North Korean gov’t group to loot crypto firms 
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“US-based JumpCloud hacked by North Korean gov’t group to loot crypto firms” — Protos" src="https://protos.com/us-based-jumpcloud-hacked-by-north-korean-govt-group-to-loot-crypto-firms/embed/#?secret=E1qFp77cvW#?secret=pr47ACxgKq" data-secret="pr47ACxgKq" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe> 
     </div> 
    </figure> 
    <p><em>Read more: US Treasury sanctions OTC traders for aiding Lazarus hackers</em></p> 
    <p>In a press release issued just a few days after the attack, CoinsPaid said that it suspected Lazarus Group of being responsible.</p> 
    <p>CoinsPaid co-founder and chief financial officer, Pavel Kashuba, told Bloomberg, “The attack itself was very quick. They are professionals.” Kashuba also claimed that <strong>July’s hack was typical of the group’s “signature approach.”</strong></p> 
    <p>As detailed in a CoinsPaid&nbsp;statement, the operation that led to the eventual attack took shape over six months with Lazarus “learning all possible details about CoinsPaid, our team members, our company’s structure, and so on.”</p> 
    <p>Once the funds had been drained, <strong>the attackers reportedly used Sinbad mixer and various swap services to obfuscate the trail of stolen <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a></strong> and the receiving digital wallets. Kashuba told Bloomberg, “You need to have a huge amount of resources to engage in such large-scale corporate espionage.”</p> 
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;</em><em>Twitter</em><em>,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p> 
   </div> 
  </div> 
 </div> 
</div>

Hackers used fake job interview to trigger $37M CoinsPaid hack

TheBitTimes

Other articles published on Aug 8, 2023

Huobi to launch PayPal’s stablecoin trading

Will Axie Infinity (AXS) Price Move Out of the Cage Above $6.00?

Crypto Users’ Personal Details will be Tracked by US Companies

Litecoin halves miner rewards, InQubeta draws fresh investor interest

Algorand (ALGO) up 10%, Bull Sets New Target

Alibaba Stock Price Prediction: Will BABA be Bullish In 2023?

Join our free newsletter for daily crypto updates!