Hackers Pull Off $12,000 Bitcoin Heist

http://www.wired.com/wiredenterprise/2013/03/digital-thieves-pull-off-12000-bitcoin-heist/

by doublextremevil • 13 years ago

20 11 13 years ago

wired.com

leethax0r• 13 years ago

Can someone post a mirror? Wired.com is blocked where I am.

Or even just post the text as a comment. Thanks.

purpl3p3rs0n• 13 years ago

http://viewtext.org/article?url=http%3A%2F%2Fwww.wired.com%2...

BariumBlue• 13 years ago

here ya go: http://pastebin.com/dG0cPYPa

mahmud• 13 years ago

I think the bar for "heist" keeps getting lowered.

cjbprime• 13 years ago

Yes, this seems smaller than previous large bitcoin thefts by an order of magnitude or two.

csense• 13 years ago

What about the bar for "hacker"?

You don't really need technical skills to convince a service provider to give you access you shouldn't have, when the original signup's security answer was publicly available information.

This attack vector was exactly how Sarah Palin's Yahoo mail account was "hacked" in the 2008 presidential campaign. So you'd think people would be more careful nowadays...

xyzzy123• 13 years ago

Good question...

It's interesting to me, because "socialing" DNS and other providers generally isn't in-scope during pentesting.

Would be interested to know if there are any pentesters / firms who have this in their "standard" methodology, for webapp or external network testing.

fomojola• 13 years ago

I'm curious why people still use their actual mother's maiden name for the answer for security questions: I just make something up and write it down on a piece of paper or store it in an encrypted file. It means I have to look it up to confirm my identity, but all in all I think that's worth it to eliminate the break-in risk (you do have the occasional odd conversation where you have to explain to a service rep "No, my mother's maiden name isn't really 'Winter is coming'").

qwertzlcoatl• 13 years ago

Less a hack, more social engineering. It was not an intrusion of cryptography or computer systems, it was an intrusion of people.

dagw• 13 years ago

Social engineering has traditionally always been a key part of the black hat hackers toolbox. If you for example read issues of Phreak magazine from back in the day you'll find many articles about social engineering next to the articles about crypto and technical details of phone and computer systems.

rmc• 13 years ago

Bitcoin: Security amateur hour. The bitcoin community really is amateurs.

Hackers Pull Off $12,000 Bitcoin Heist

Related Stories