Share
Daily Tech News Show
Cyberattack Hits Crypto.com - Threatwire
By Shannon Morse, ThreatWire
The world’s third largest cryptocurrency trading platform was hit with a cyberattack last week that compromised 483 customer accounts and led to $34 million crypto to be withdrawn. Crypto.com was targeted and US $33.8 million was stolen, though the CEO stated in multiple interviews that customer funds are not at risk.
The hack caused about $15 million in ethereum, $18.6 million bitcoin and $66,000 misc crypto to be stolen from the platform. The attack was detected on January 17th, at which time Crypto.com suspended withdrawals for about 14 hours. 2FA tokens were also revoked, so users had to re-sign in and set up new 2FA tokens for access.
While this crypto was stolen via unauthorized withdrawals, the platform fully reimbursed affected users. Transactions resumed on January 18. According to a Crypto.com post, their risk monitoring systems detected the attack, and saw transactions being approved without 2FA authentication, meaning the 2FA was being bypassed by attackers.
The company migrated to a completely new 2FA infrastructure in response. They also added that the company will be moving away from 2FA and moving to true multi factor authentication for end user security, and beefing up security with an Account Protection Program, which will offer better security for funds within the App and exchange. APP would also restore funds up to $250,000 in the event of unauthorized access.
A lot of technical information regarding this attack has not been shared with the public. For example - who was behind this attack? How were they able to bypass 2FA restrictions for withdrawals? What protocol was being used to implement 2FA and how does the new infrastructure fix these problems? Hopefully Crypto.com will share some of this information with their customers to ease some of the concerns shared via social media.
https://threatpost.com/2fa-bypassed-crypto-com-heist/177846/
https://crypto.com/product-news/crypto-com-security-report-next-steps
https://www.vice.com/en/article/g5qj9j/cryptocom-says-incident-was-actually-dollar30-million-hack
https://www.zdnet.com/article/crypto-com-ceo-responds-to-complaints-of-login-issues-after-hack/
More episodes
View all episodes
5380. What's The Next Apple-gate? - DTNS 5380
56:45||Season 13, Ep. 5380The top stories of the week are about AI discovering a critical bug in the Web, Responsible Disclosure and patching systems breaking down, and how nation-states may be getting a jump on bugs before they even become public. And it's all the same story. Plus, the iPhone Duo's horrible launch bug!Starring Sarah Lane, Tom Merritt, Robb Dunewood, Huyen Tue Dao, Len Peralta, Roger Chang, Joe.Link to the Show Notes.
5379. Talk to Your DNA - DTNS 5379
27:10||Ep. 5379Hugging Face releases an on-device open model for studying DNA. And Amazon security researchers say PHP2Shell may have been exploited as early as Saturday.Starring Tom Merritt and Sarah LaneShow notes found here.5378. The Day the Internet Broke - DTNS 5378
34:34||Season 13, Ep. 5378Eight insecure TLS certificates seemed to be bad enough, but then folks leaked out a PHP vulnerability that could compromise more than 70% of the Web. Thank goodness there’s a fix for both. But one will take longer than the other to completely resolve.Starring Tom Merritt and Huyen Tue Dao.Links to stories discussed in this episode can be found here.5377. Vibe Code Ads Right Off of Your TV - DTNS 5377
34:35||Ep. 5377People are removing the smart from their TVs using agents. Plus, the discovery that could help us actually understand what goes on within LLMs.Starring Tom Merritt and Jason Howell.Show notes found here.5376. Airship Successfully Delivers Cell Service in Japan - DTNS 5376
29:33||Season 13, Ep. 5376A New Mexico company delivers LTE from a zeppelin in Japan, Samsung may shift its S-series announcement back to January, and iPhone Duo preorders start shifting earlier.Starring Tom Merritt and Robb Dunewood.Links to stories discussed in this episode can be found here.The Scampocalypse: How to Survive the Present Attacks
21:51||Season 13- What's changing now- Bad habits in the past are now dangerous. - Cognitive security- Patient Zero: Madison Square Garden hackFeaturing Tom Merritt and Brian Brushwood.5376. Is the DIY PC Era Over? – DTNS Weekend
44:19||Season 13, Ep. 5376On this episode of DTNS Weekend, Roger and Patrick go head-to-head over the possible death of DIY PC building. Who or what is killing the hobby, and is this the end of an era, or will PC building return to its niche roots?Starring Roger Chang, Patrick Nortonhttps://www.microcenter.comhttps://wccftech.comhttps://www.tweaktown.comhttps://en.overclocking.com
5375. Who's Running Your Smart Home? - DTNS 5375
58:10||Season 13, Ep. 5375This week Apple announced its Home View smart home hub along with several smart home devices in cooperation with LG and Schneider. So our BIG QUESTION this week is: Do you want Apple to run your smart home?Starring Sarah Lane, Tom Merritt, Robb Dunewood, Jason Howell, Len Peralta, Roger Chang, Joe.Link to the Show Notes.5374. Who the GoogleBook is For - DTNS 5374
33:18||Ep. 5374Iyaz Akhtar from PC Mag joins us to talk about his experience using a Googlebook as his daily driver. Plus Amazon’s Bee has new note-taking gadgets.Starring Tom Merritt, Sarah Lane, and Iyaz Akhtar.Show notes found here.