Harmony

Evan

CoinsPaid

Read

The CoinsPaid attack was a six-month-long operation that involved infiltrating the company and was likely carried out by the North Korean hacker group Lazarus. 
In a lengthy Twitter thread published on Aug. 29, entrepreneur and CoinsPaid advisor Evan Luthra described the attack on CoinsPaid as a “fully master-planned attack.” 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 In just 40 minutes, CoinsPaid's $37M was wiped away! The hackers spent 6 months planning this attack. It was a fully master-planned attack. Here's the full story of how a Job Offer led to a $37M crypto heist &amp; how you can protect your funds:🧵 <a href="https://t.co/AotRYBl9TG" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/AotRYBl9TG</a>— EvanLuthra.eth (@EvanLuthra) <a href="https://twitter.com/EvanLuthra/status/1696455244803133895?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 29, 2023</a> 
 </blockquote> 
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
Luthra further suggested that “top-tier hacker group Lazarus might be behind their recent attack” and that “investigations are pointing their way.” This group is also responsible for an attack on Sony Pictures, the Wannacry ransomware attacks, the $625 million Axie Infinity, $100 million Harmony Protocol, and $100 million Atomic Wallet crypto heists. 
 You might also like: <a href="https://crypto.news/breaking-coinspaid-targeted-in-37-3-million-hack/" rel="noopener noreferrer nofollow"> Coinbase to delist six altcoins, including OOKI and VGX </a> 
According to Luthra, the hacker group has been monitoring CoinsPaid for six months. It infiltrated their systems and found vulnerabilities in this time. 
In March, the company faced numerous attacks, including social engineering attempts and distributed denial of service attacks. CoinsPaid received “sketchy queries” from an alleged Ukrainian startup. 
In April, Coinspad’s four major systems were attacked. In July and August, its staff was bribed. That was followed by a major attack from over 150,000 IP addresses to trick an employee into installing software that let them take over the systems. 
Moreover, Luthra explains how exactly the hacker group accessed the firm’s infrastructure. CoinsPaid staff was contacted by recruiters on LinkedIn with promises of hefty salaries ranging from $16,000 to $24,000 per month. During the interviews, the employees were tricked into installing the remote device management service JumpCloud Agent through a test assignment with malicious code. 
JumpCloud, in its turn, was <a href="https://www.bleepingcomputer.com/news/security/jumpcloud-breach-traced-back-to-north-korean-state-hackers/" target="_blank" rel="noopener noreferrer nofollow">compromised</a> by North Korean hackers in July. 
As a result, the upcoming hack siphoned $37.3 million worth of cryptocurrency out of the company’s wallets in late July. 
 Read more: <a href="https://crypto.news/breaking-coinspaid-targeted-in-37-3-million-hack/" rel="noopener noreferrer nofollow"> CoinsPaid targeted in $37.3m hack </a>

CoinsPaid reveals how job offer led to $37m hack

crypto.news

Other articles published on Aug 29, 2023

Binance Contemplates Exiting Russia: WSJ

dYdX to unlock 6.52M tokens worth $14M for community treasury, rewards

Backed now natively issues tokens on BNB Smart Chain: enabling new integrations and scalability

Robinhood Joins Top Bitcoin Wallets with $3B Holding

Bitcoin further downside unless…

Thailand to Host FinTech Festival Asia 2023

Join our free newsletter for daily crypto updates!