Rock

2024

Request

Meta

An online hacker claims they have access to a law enforcement request account, “KodexGlobal,” allowing buyers to subpoena user information from Coinbase, Binance, Chainlink and other firms.&nbsp;
<a href="https://www.infostealers.com/article/infostealer-infections-lead-to-hacking-of-google-tiktok-and-meta-law-enforcement-systems/" target="_blank" rel="noopener nofollow">According</a> to a&nbsp;blog&nbsp;updated on Feb. 4, cybercrime solutions provider Hudson Rock reported the hacker is selling access to the law enforcement request system account on BreachForums for $5,000 or $300 per emergency data request (EDR). 
Services that the hacker claims to be able to make EDRs for include LinkedIn, Discord, Tinder, Binance, Coinbase, Chainlink, SendGrid, and many others. Speaking to Cointelegraph, a Binance spokesperson clarified that the blog's findings do not represent a breach of Binance’s system. While suspecting&nbsp;involve compromised law enforcement accounts, the Binance spokesperson said:
<blockquote>
 With a thorough documentation process in place and constant monitoring for any compromised accounts, we remain committed to safeguarding our user data against any form of unauthorized access.
</blockquote>
KodexGlobal is a platform used for secure communications between law enforcement agencies and regulators. Hackers with access to the platform could request personal data about a company’s users by falsely claiming legal reasons for the request. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-02/1a1d525b-d806-4648-a00a-3022fd431645.png" alt="" title="">
 <figcaption style="text-align: center;">
 Screenshot from post on hacker forum. Source: Hudson Rock
 </figcaption>
</figure>
The abuse of the system could lead to identity theft, extortion and financial loss for users, especially those holding crypto assets, it noted. 
Cointelegraph reached out to KodexGlobal for comment.
According to Hudson Rock, the hacker “very likely” gained access to law enforcement systems by exploiting credentials obtained from Infostealer Infections. These are often gained by compromised computers owned by law enforcement officers.
“Today, Hudson Rock researchers identified over 50 different sets of credentials for Google’s law enforcement system from various Infostealer infections,” said Hudson Rock.
<blockquote class="twitter-tweet">
 New Blog Post: Hacking of Google, TikTok, and Meta Law Enforcement Systems as a Result of Infostealer infections<a href="https://t.co/PS2t0ZuNif">https://t.co/PS2t0ZuNif</a>— Hudson Rock (@RockHudsonRock) <a href="https://twitter.com/RockHudsonRock/status/1752639862371479758?ref_src=twsrc%5Etfw">January 31, 2024</a>
</blockquote> 
In December 2023, the firm <a href="https://www.infostealers.com/article/hacker-sells-access-to-binances-law-enforcement-portal-cryptocurrency-holders-at-risk/" target="_blank" rel="noopener nofollow">reported</a> that a hacker was attempting to sell access to Binance’s law enforcement portal through KodexGlobal.&nbsp;
It posted a screenshot showing three computers reportedly infected by global malware-spreading campaigns in 2023, resulting in compromised credentials. 
The three logins shown in the image with access to Binance’s login panel appeared to belong to compromised law enforcement officers in Taiwan, Uganda and the Philippines. However, it did not confirm any Binance system breaches, user data or crypto thefts. 
At the time, KodexGlobal dismissed it as a “scam,” though Binance reportedly confirmed they were aware of “such access,” according to the firm.
Read more: <a href="https://cointelegraph.com/news/how-it-all-went-down-web3-protocol-mass-phishing-campaign-timeline">How it all went down: Web3 protocol mass phishing campaign timeline</a>
In a separate incident, Binance recently <a href="https://cointelegraph.com/news/binance-github-code-leak-outdated-minor-risk-spokesperson">refuted a report</a> claiming a “highly sensitive” cache of internal passwords and code had been exposed on GitHub for months.
On Feb. 5, the firm denied that there was any such leak from Binance and that user accounts remain safe. 
<blockquote class="twitter-tweet">
 Our security team has assessed this - as they do all potential threats - and have confirmed there is no such leak from Binance systems. User accounts remains safe. Accounts are secured through many defenses, including MFA, biometrics, authenticators, etc. As always, we…— Binance Customer Support (@BinanceHelpDesk) <a href="https://twitter.com/BinanceHelpDesk/status/1754259406085308552?ref_src=twsrc%5Etfw">February 4, 2024</a>
</blockquote> 
Magazine: <a href="https://cointelegraph.com/magazine/defis-billion-dollar-secret-the-insiders-responsible-for-hacks/">DeFi’s billion-dollar secret: The insiders responsible for hacks</a>

Hacker claims to have way to ‘subpoena’ Discord, Binance, Coinbase user info

Cointelegraph

Other articles published on Feb 5, 2024

5 cryptocurrencies under $1 to buy this week

Bitcoin Surpasses $43,500 as US Markets React to Chinese Stock Turmoil

Argo Blockchain shares fall 7.5% amid production dip

Celestia Token Surges, Rewarding Early Investors

Is Dogecoin Price Poised For Extreme Volatility Amid Dip Below $0.079?

Jupiter Token (JUP) Price with LFG Launchpool Optimism

Join our free newsletter for daily crypto updates!