Harmony

Evan

CoinsPaid

Read

<div class="cryptonews"> 
 <p class="is-style-lead">The CoinsPaid attack was a six-month-long operation that involved infiltrating the company and was likely carried out by the North Korean hacker group Lazarus.</p> 
 <p>In a lengthy Twitter thread published on Aug. 29, entrepreneur and CoinsPaid advisor Evan Luthra described the attack on CoinsPaid as a “fully master-planned attack.”</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">In just 40 minutes, CoinsPaid's $37M was wiped away!<br><br>The hackers spent 6 months planning this attack.<br><br>It was a fully master-planned attack.<br><br>Here's the full story of how a Job Offer led to a $37M crypto heist &amp; how you can protect your funds: pic.twitter.com/AotRYBl9TG</p>— EvanLuthra.eth (@EvanLuthra) August 29, 2023
   </blockquote> 
  </div>
 </figure> 
 <p>Luthra further suggested that “top-tier hacker group Lazarus might be behind their recent attack” and that “investigations are pointing their way.” This group is also responsible for an attack on Sony Pictures, the Wannacry ransomware attacks, the $625 million Axie Infinity, $100 million Harmony Protocol, and $100 million Atomic Wallet crypto heists.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Coinbase to delist six altcoins, including OOKI and VGX 
 </div> 
 <p>According to Luthra, the hacker group has been monitoring CoinsPaid for six months. It infiltrated their systems and found vulnerabilities in this time.</p> 
 <p>In March, the company faced numerous attacks, including social engineering attempts and distributed denial of service attacks. CoinsPaid received “sketchy queries” from an alleged Ukrainian startup.</p> 
 <p>In April, Coinspad’s four major systems were attacked. In July and August, its staff was bribed. That was followed by a major attack from over 150,000 IP addresses to trick an employee into installing software that let them take over the systems.</p> 
 <p>Moreover, Luthra explains how exactly the hacker group accessed the firm’s infrastructure. CoinsPaid staff was contacted by recruiters on LinkedIn with promises of hefty salaries ranging from $16,000 to $24,000 per month. During the interviews, the employees were tricked into installing the remote device management service JumpCloud Agent through a test assignment with malicious code.</p> 
 <p>JumpCloud, in its turn, was compromised by North Korean hackers in July.</p> 
 <p>As a result, the upcoming hack siphoned $37.3 million worth of cryptocurrency out of the company’s wallets in late July.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> CoinsPaid targeted in $37.3m hack 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div> 
<p>Source: <a rel="dofollow" target="_blank" href="https://thebittimes.com/coinspaid-reveals-how-job-offer-led-to-37m-hack-tbt60812.html">https://thebittimes.com/coinspaid-reveals-how-job-offer-led-to-37m-hack-tbt60812.html</a></p>

CoinsPaid reveals how job offer led to $37m hack

TheBitTimes

Other articles published on Aug 29, 2023

Tornado Cash Faces Money Laundering Allegations

A deep dive into Microvision, a new Bitcoin sidechain.

ETHWarsaw returns for its second edition alongside Warsaw Blockchain Week

Top Crypto Analysis 28 Aug: SPX, DXY, BTC, ETH, BNB, XRP, ADA, DOGE, SOL, DOT

MoonPay Launches Venture Arm to Invest in Early Stage Web3 Startups

FTX Founder Sam Bankman-Fried's Defense Again Seeks 'Temporary Release' for Trial Preparation

Join our free newsletter for daily crypto updates!