Report reveals Russian Hackers May Be Responsible for $530 Million Cryptocurrency Hack

Report reveals Russian Hackers May Be Responsible for $530 Million Cryptocurrency Hack

It was previously believed that North Korean hackers were behind the January 2018 Coincheck hack, but recent developments in the investigation suggest that Russian actors may have been responsible.

A new report of the investigation into the $530 million hack that ruined Japanese cryptocurrency exchange Coincheck in January 2018 states that Russian, not North Korean, actors may have been behind the attack.

The Asahi Shimbun, a Japanese newspaper, reported that viruses that were thought to have been used in the hack were found on employees’ computers. According to the Asahi Shimbun, the viruses were linked to Russian hacker groups and named “Mokes” and “Netwire.” These viruses were most likely transferred via email, and allowed the hackers to gain access to private keys.

In addition, the viruses have previously appeared on Russian-based message boards with Mokes first appearing in June 2011 and Netwire appearing approximately 12 years ago.

In the January 2018 attack, Coincheck lost over $500 million worth of NEM tokens. The company was adamant that it wasn’t an inside job, even though at the time there was no suggestion of how the attacks had been able to gain access to the system without insider information.

Francis Gaffney, director of threat intelligence at Mimecast, said that as of January 2019, over $1 billion had been lost from cryptocurrency attacks.

“Coincheck is just the latest incident,” Gaffney said. “At the end of the day, cybercriminals are going to go directly where the money is via point-of-sale-focused attacks, like we’re seeing here and with ransomware.”

Gaffney said that these crypto-based attacks are particularly concerning for companies dealing with currencies, and other products that require a large amount of trust.

“Attacks on cryptocurrencies and their enabling exchanges are particularly troubling for systems like currencies, which rely heavily on trust for reliable means of exchange,” Gaffney said. “We see these crypto-based attacks begin with sophisticated phishing campaigns and malware droppers. From there, threat actors study their victims to identify their credentials and capture sensitive information.”

About the Author

Kaitlyn DeHaven is the Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.