A few days ago Multichain’s users were hacked by several attackers groups, all abusing the same vulnerability in Multichain (previously AnySwap) smart contract. The attackers were able to steal tokens valued at millions of US Dollars. Crypto Protocol Publicly Announces Flaw, Users Relentlessly Owned by Hackers The hack against users of Multichain is getting worse as a cybersecurity researcher calls the incident "the worst way…www.vice.com

TLDR: SUNBURST attackers recently used stolen private keys to compromise several high profile targets in the US. To significantly reduce the chances of this happening again, we suggest a radical approach based on the cryptographic technology and security architecture that power our cryptocurrency wallet. Russian Intelligence hackers recently pulled off…

TL;DR: Additional, non-all zeroes challenge strings, to exploit Zerologon The recently discovered Zerologon vulnerability (CVE-2020-1472) is one of the most dangerous Windows’ security issues exposed in recent years. Zerologon enables attackers to take over a whole Windows domain, and therefore its criticality appropriately scored the ultimate, perfect 10 CVSS score. …

TL;DR: Hunting for real-world incidents in blockchain data sometimes leads to interesting insights and findings. In this case, we were able to find UCSF’s $1.14M ransom payment on the blockchain and correlate it to an additional $700K transaction. This potentially increases the paid UCSF ransom to over $1.8M. Following our…

Digitally signed files are more trusted by the Operating System. This higher trust allows such files to execute in sensitive contexts or excluded from Antivirus scans. Consequently, attackers are trying to spoof these digital certificates to gain these extended privileges for their malicious code. Earlier this year, Peleg Hadar and…

TL;DR: Enterprise ransomware attacks are spiralling out of control. Victim companies are compelled to pay, using cyber-insurance as a “pain killer” that relieves the immediate pain but worsens the problem. Soon, regulators would have to step in and stop this vicious cycle and the withdrawal symptoms will be harsh. Reading…

TL;DR: We present a unique glimpse into Bitcoin money laundering practices, including a hack of more than $1.5M laundered via the Binance exchange. A few days ago, CWT, the travel giant with more than $1B in revenue last year, was hit by the Ragnar Locker ransomware. …

Trigger Warning: This post uses COVID-19 pandemic analogies to discuss Ransomware. While we think these analogies are justified, we do recognize that some might find it offensive. If you do, just stop reading now. As of lately, we all unwillingly became experts in protecting ourselves and our loved ones against…

I am a sucker for “Load Bearing Analogies” (© Dan Kaminsky) in cryptography. If you have been following my stories, you have already noticed that. One of the best examples for such analogies is the known ECB penguin. Therefore, when Zoom upgraded its encryption from ECB, I just had to…