2 min read

Know who hacked the Binance cryptocurrency exchange? Earn $250,000

Graham CLULEY

March 13, 2018

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
Know who hacked the Binance cryptocurrency exchange? Earn $250,000

Binance, one of the world’s biggest cryptocurrency exchanges by trading volume, has offered a reward equivalent to $250,000 to anyone providing information that leads to the arrest of hackers who attacked the platform last week.

For two minutes on March 7th, the Binance platform saw abnormal trading activity, which caused automatic protection systems to trigger, blocking any withdrawals.

The exchange explained that it had seen sophisticated phishing attacks targeting its users since early January, and around February 22nd there was a sharp uptake in phishing emails pointing to similar-looking domains but using unicode characters (under the “i” and the “a” of “binance.com”

Reports suggest that many of the compromised accounts did have two-factor authentication (2FA) enabled for a higher level of protection. Unfortunately for them, their 2FA codes were valid for 30 seconds or so, meaning that once the code had been given to the phishing site the attackers could generate an API key and use it to access the real site.

All very sneaky. But whoever seized control of the accounts appears to have bided their time, choosing not stealing cryptocurrency immediately but instead creating a trading API key for each hacked account.

On March 7th the hackers were ready to try to turn their hack into hard cash, placing “a large number of market buys on the VIA/BTC market, pushing the price high, while 31 pre-deposited accounts were there selling VIA at the top.”

The bad news for the hackers was that Binance’s automated systems quickly blocked all withdrawals, including attempts by the phishers themselves to make off with their intended fortune.

As Binance describes, “not only did the phishers fail to steal any coins, their own coins have also been withheld.”

Binance says that its prompt action meant that the hack was unsuccessful, but nonetheless it was an organised attack and one that it wishes to see result in the arrest of whoever was responsible.

To that end Binance is offering a $250,000 equivalent bounty “to anyone who supplies information that leads to the legal arrest of the hackers involved in the attempted hacking incident on Binance on March 7th, 2018.”

Those with information are asked to share it with their local law enforcement agencies, as well as bounty@binance.com.

In addition, Binance says it has allocated the equivalent of ten million dollars for future awards against illegal hacking attacks against its systems.

tags


Author



Right now

Top posts

John Oliver Shows the Dark Side of Data Brokerage on Last Week Tonight

John Oliver Shows the Dark Side of Data Brokerage on Last Week Tonight

April 15, 2022

3 min read
Bitdefender Labs Warns of Phishing Scams Targeting MetaMask Users

Bitdefender Labs Warns of Phishing Scams Targeting MetaMask Users

April 14, 2022

3 min read
Why and how to hide your IP address while traveling

Why and how to hide your IP address while traveling

April 13, 2022

2 min read
How Bitdefender Can Help Restore Your Privacy in the Digital Age

How Bitdefender Can Help Restore Your Privacy in the Digital Age

April 04, 2022

3 min read
How Strong is VPN Encryption?

How Strong is VPN Encryption?

February 28, 2022

3 min read
Top Three Ways Internet Users Unknowingly Help Cybercriminals

Top Three Ways Internet Users Unknowingly Help Cybercriminals

February 25, 2022

4 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Malware and PUA Campaigns Abuse Existing Apps, Here’s a Top 10 to Watch Out For Malware and PUA Campaigns Abuse Existing Apps, Here’s a Top 10 to Watch Out For
Silviu STAHIE

May 19, 2022

3 min read
Researchers Find Thousands of Websites that Record Everything You Type Researchers Find Thousands of Websites that Record Everything You Type
Radu CRAHMALIUC

May 16, 2022

2 min read
Ukrainian Citizen Sentenced to Prison for Brute-Forcing Credentials and Selling them Online Ukrainian Citizen Sentenced to Prison for Brute-Forcing Credentials and Selling them Online
Silviu STAHIE

May 13, 2022

2 min read