What is Cryptocurrency attacksCryptojacking is essentially the exploitation of your CPU's labor, where threat actors leverage a victim's CPU to mine cryptocurrency. ... Threat actors then monitor these wallets' transactions and perform a combined analysis of different addresses on the blockchain to uncover the identity of the entity behind each wallet.
What is Bitcoin attackcryptocurrency miner or group of miners gains control of more than 50% of a network's blockchain. Such attacks are one of the most significant threats for people who use and buy cryptocurrencies.
Cryptocurrency Attacks To Be Aware Of In 2021It’s been a pretty big year so far for cryptocurrency. After it reached an all-time high in April 2021, new investors desperate not to miss out on the digital gold rush flocked to the exchanges to buy Bitcoin and altcoins. Cryptocurrencies’ current total market cap sits just above $1.7 trillion. The cryptocurrency exchange Coinbase recently launched an IPO, India has reversed a ban on cryptocurrencies, and ransomware groups continue to demand payment in anonymity-based cryptocurrency. I’ve even seen advertisements for Bitcoin on public transport during my commute.
The rush to buy has meant that many new to the cryptocurrency scene are investing without fully understanding how the currencies work. This has left the door open for cybercriminals to scam, steal, and otherwise exploit this lack of knowledge. With the cryptocurrency space showing no signs of slowing down, we review the most common attack vectors cybercriminals have discussed on cybercriminal forums in 2021, mitigations for these techniques, and examine how threat actors are adapting proven methods to target this new wave of users.
WHAT ARE THE MOST COMMONLY DISCUSSED CRYPTO ATTACK VECTORS?The most common vectors discussed across cybercriminal forums in recent months are:
Reverse proxy phishing *Cryptojacking
*Dusting
*Clipping
Reverse proxy phishing is a sort of domain-spoofing Man-in-the-Middle (MitM) attack whereby an attacker secretly “listens” to traffic between two unsuspecting parties. This technique is used to bypass two-factor authentication (2FA).
Cryptojacking is essentially the exploitation of your CPU’s labor, where threat actors leverage a victim’s CPU to mine cryptocurrency. Marx would be livid!
Cryptocurrency “dusting” is deanonymizing your crypto wallet by sending tiny amounts of crypto “dust” to multiple wallets. Threat actors then monitor these wallets’ transactions and perform a combined analysis of different addresses on the blockchain to uncover the identity of the entity behind each wallet.
Cryptocurrency “clipping” is stealing cryptocurrency in the process of a transaction through the use of malware that automatically substitutes the intended wallet address with the threat actor’s wallet address.
REVERSE-PROXY PHISHING AND MITIGATIONSIt’ll come as no surprise that cybercriminals are just as likely to employ phishing techniques to steal money from your crypto wallet as they are to drain your bank account. However, as many cryptocurrency platforms strongly encourage the use of two-factor authentication (2FA) methods such as authenticator apps, gaining access to your crypto accounts isn’t so simple. Authenticator apps mean that threat actors can’t just input credentials obtained during a phishing campaign to access your wallet. Nor can they employ SIM swapping techniques to intercept one-time passcodes (OTPs) delivered via SMS. This is where reverse proxy phishing, also known as “session hijacking,” comes into play.
Cybercriminal vendor advertising rates for reverse proxy phishing services targeting high-profile platforms
1.The victim visits a fake domain they likely found in a spam email, e.g.
www.c0inbase[.]com/login
2. This fake domain is hosted on a malicious reverse proxy server that sits in between the victim and the server hosting the real login page. The reverse proxy server can monitor and control any traffic passing through.
3. The reverse proxy server retrieves the legitimate login page and loads a copy for the victim. Fraudulently obtained SSL certificates ensure the victim’s browser does not detect that the fake webpage is a copy.
4. The victim enters their login credentials on the fake page and is asked to perform two-factor authentication.
5. The malicious server relays these credentials and 2FA code to the real login page on the real server.
6. The real server verifies the credentials and, if correct, grants account access to the reverse proxy server, which it thinks is the victim client. The reverse proxy server can now control the session and cut the victim out – hence the term “session hijacking.” The attacker can now send any cryptocurrency to their own wallet.
https://www.digitalshadows.com/blog-and-research/cryptocurrency-attacks-to-be-aware-of-2021/https://www.google.com/search?q=what+is+cryptocurrency+attack&oq=what&aqs=chrome.0.69i59l3j69i57j69i61.1795j0j4&client=ms-android-oppo-rvo2&sourceid=chrome-mobile&ie=UTF-8This Content not mine but I'll make This Thread in order to be aware of Cryptocurrency attacks
