Read

Hackers have allegedly targeted OKX, stealing funds from at least two accounts in a sophisticated attack involving SMS risk notifications and the creation of new API keys. 
Crypto exchange <a href="https://crypto.news/tag/okx/" target="_blank" rel="">OKX</a> has reportedly been targeted by hackers, with at least two users reporting their funds were drained after receiving <a href="https://crypto.news/tag/sms/" target="_blank" rel="">SMS</a> risk notifications from <a href="https://crypto.news/tag/hong-kong/" target="_blank" rel="">Hong Kong</a>. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 两个不同的受害者，今天凌晨遭遇的交易所账号被盗币事件的手法及一些特征居然是相似的，除了 <a href="https://twitter.com/AsAnEgg?ref_src=twsrc%5Etfw" target="_blank" rel="">@AsAnEgg</a> 提到的共性，还包括短信风险通知来自“香港”这个特征、创建了新的 API Key（有提现、交易权限，这也是为什么之前怀疑有对敲意图，目前看来可以排除了）。… <a href="https://t.co/pqIjqLhmkB" target="_blank" rel="">https://t.co/pqIjqLhmkB</a>— Cos(余弦)😶‍🌫️ (@evilcos) <a href="https://twitter.com/evilcos/status/1799677006097027397?ref_src=twsrc%5Etfw" target="_blank" rel="">June 9, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
According to SlowMist founder Yu Xian, an unidentified entity created new API keys with withdrawal and trading permissions, allowing them to swap and drain the coins from the platform. OKX’s Chinese branch stated <a href="https://x.com/okxchinese/status/1799828406412210277" target="_blank" rel="">in a Jun.9 post on X</a> that the exchange has reached out to the affected users and is currently investigating the incidents. 
 You might also like: <a href="https://crypto.news/fake-airdrop-sms-to-kucoin-users-stir-data-leak-concerns/" rel=""> Fake airdrop SMS to KuCoin users stir data leak concerns </a> 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 “If it’s finally determined that the platform is responsible, the platform will take the initiative to bear it. In addition, we will announce the results as soon as the relevant investigation is completed.” 
 OKX Chinese 
</blockquote> 
As of press time, the full extent of the attack remains unclear, and it’s yet to be seen how exactly the hackers managed to hijack the trading accounts. 
SIM swapping, a form of phone hijacking, has long been a significant threat to crypto investors, with even major industry players falling victim. For instance, in 2021, Coinbase <a href="https://www.bleepingcomputer.com/news/security/hackers-rob-thousands-of-coinbase-customers-using-mfa-flaw/" target="_blank" rel="">disclosed</a> that hackers had stolen crypto from about 6,000 users by bypassing multi-factor authentication in a suspected phishing campaign that involved hijacking two-factor authentication SMS messages. 
Other incidents have involved hijackers porting phone numbers to intercept one-time passwords and validate transactions or change account credentials. In response, many major crypto companies have moved away from SMS-based two-factor authentication, though some still rely on this authentication method. 
 Read more: <a href="https://crypto.news/sim-swap-attacks-amplify-companies-recommend-using-sms-2fa/" rel=""> As SIM swap attacks amplify, companies recommend against using SMS as 2FA </a>

Hackers target OKX customers in suspected SIM swap attack

crypto.news

Other articles published on Jun 10, 2024

Sealana Presale Surpasses $4 Million Milestone As It Prepares To List

Top Memecoins to Watch for Huge Returns in July 2024

Virtual Asset User Protection Act: South Korea’s New Crypto Law

First Data Arrived from Bitcoin and Ethereum ETFs Approved in the UK!

MoonBag Presale Shoots to Fame with 88% APY on Staking as Hedera and Dogwifhat Look for Answers

Crypto Market Crash Alert? Expert Warns of BRUTAL Recession Risk by 2024

Join our free newsletter for daily crypto updates!