• An attacker targeted Paradigm’s head of security and tried to steal his Bitcoin in three clicks. 
  • Sam Sun shared details of the compelling hook and how easy it is for individuals to fall prey to Bitcoin hacks. 
  • Attackers can steal wallet data directly from browser extensions or Discord session tokens when users click on malicious links. 

Former white hat hacker and the head of security at Paradigm, a VC firm, was targeted by a hacker recently. Sam Sun told his 86,300 Twitter followers how three clicks and two malicious file downloads could give the hacker access to his Bitcoin

Hackers target wallet data of users, send malicious links

Sam Sun, a former white hat hacker and the head of security at Paradigm, was recently hit by an attacker in an attempt to steal his wallet data and eventually his Bitcoins. Sun performed malware analysis and broke down the series of events that could have led to a successful attack on his wallet data. 

Sun shared the analysis on his Twitter account, revealing how simple it is to be hacked and how attackers are stealing info like wallet data and Discord session tokens to gain access to users’ cryptocurrencies. In the case of Sun, a malicious actor sent a message with a link to arouse his curiosity. 

The message read, 

Hello

I am sorry to disappoint you. 

You are being sued. 

You can read a copy of the lawsuit here (Malicious link)

No copyright has been claimed. 

You can also write a statement in response, good evening John.

Sun revealed that messages accompanied by malicious links are compelling hooks and when placed under pressure, even trained security professionals might act irrationally and click on the link. 

Clicking the link downloads a file to the target’s computer. This is the first step, opening the downloaded file takes the target another step closer to getting hacked. Once the file is opened, the attacker has access to wallet data, browser extensions or Discord session tokens of the target. This gives the malicious actor direct access to your cryptocurrency. 

“Hybrid Analysis”, an automated malware analysis service provider, helped Sun identify that the two downloaded files on his device were malicious. Running the files through a malware analysis detector helped him determine that the attacker attempted to steal his cryptocurrency. Therefore, Sun warns his followers against running downloaded programs, files without running them through malware analysis detector. 

Results after running both downloads through Hybrid Analysis

Results after running both downloads through Hybrid Analysis

Attacks are therefore not limited to the DeFi ecosystem, and cryptocurrency holders are simply three clicks away from losing access to their holdings. 

Why KuCoin’s insolvency could have serious implications on Bitcoin price

Analysts at FXStreet evaluated the impact that Mt.Gox’s insolvency had on Bitcoin and revealed that they expect a similar situation in case of KuCoin. For more information and the impact on Bitcoin price, check out this video:

 


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.

If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.

FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.

The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.

Recommended content


Recommended Content

Editors’ Picks

Ethereum ETF issuers file updated drafts, ETH staking still a possibility

Ethereum ETF issuers file updated drafts, ETH staking still a possibility

Ethereum (ETH) is down 1% on Wednesday as issuers began filing their final spot ETH ETF S-1 drafts with the Securities & Exchange Commission (SEC) in anticipation of a launch on July 23. Meanwhile, SEC commissioner Hester Peirce also said the regulator may reconsider its position on ETH staking within the ETFs.

More Ethereum News

Could Vitalik Buterin's argument affect support for pro-crypto political candidates?

Could Vitalik Buterin's argument affect support for pro-crypto political candidates?

Vitalik Buterin released a post arguing that politicians who claim to be crypto-friendly now may not support it in the future. Buterin highlighted many key factors that crypto represents beyond trading tokens. Intentions of pro-crypto politicians are becoming the subject of debate following Buterin's post.

More Cryptocurrencies News

Dogecoin provides opportunity for investors to ride potential 40% rally

Dogecoin provides opportunity for investors to ride potential 40% rally

DOGE has maintained price patterns similar to BTC, ETH, and SOL. The popularity of other newer meme coins may be drawing attention away from DOGE. DOGE on-chain metrics and technical indicators suggest a rally may be on the horizon.

More Dogecoin News

AI tokens rally following Grayscale's Decentralized AI Fund launch

AI tokens rally following Grayscale's Decentralized AI Fund launch

Grayscale launched its Decentralized AI Fund on Wednesday, allowing investors to gain exposure to the price of AI-focused cryptocurrencies. Following the announcement, the general market cap of AI tokens rose by nearly 4%.

More Cryptocurrencies News

Bitcoin: Investors wonder if BTC troubles are behind

Bitcoin: Investors wonder if BTC troubles are behind

Bitcoin (BTC) stabilized around the $57,000 mark this week, while the German Government persists in transferring Bitcoin to exchanges. Concurrently, US spot Bitcoin ETFs have recorded inflows.

Read full analysis

BTC

ETH

XRP