A new era of cybercrime

[НСК-СБ]

A new era of cybercrime

This week a very unpleasant event occurred.

Imagine: you go to the wallet, payment system or bank website. You do not follow an incomprehensible link, do not confuse letters in the site name, but go to a familiar address or use a bookmark. ... And you will be taken to a scam site that looks exactly like a real site, where after entering your login and password all money from the account is stolen right there. Do you think this is impossible? Alas, this has become a reality.

Rogues have managed to replace the DNS.
Opennet.ru writes : “Attackers were able to successfully redirect Amazon Route 53 DNS service traffic to their host using BGP and replace MyEtherWallet.com with an Ethereum cryptocurrency web wallet for a few hours. A phishing attack was organized on the attacking clone of MyEtherWallet, which allowed in two hours to steal 215 ETH (about 137 thousand dollars). "

The only difference from this wallet was a self-signed HTTPS certificate, for which browsers issued a warning about problems with a secure connection, but what would you do when you saw such a message? I probably would have ignored it, deciding that the site "something is a little broken."

It was enough to enter a name and password on a fake wallet site and all the money was immediately transferred to scammers.

Frighteningly, the scammers turned out to be rich - now in the wallet where the stolen money was transferred, there are now more than $ 15 million. This may mean that the attack was only an experiment before a series of similar attacks of a much larger scale.

Perhaps in the near future we are waiting for a wave of online fraud of a new level.

© 2018, Alexey Nadezhin
A new era of cybercrime

 

[Патрушев Михаил Владимирович]

A new era of cybercrime

This week a very unpleasant event occurred.

Imagine: you go to the wallet, payment system or bank website. You do not follow an incomprehensible link, do not confuse letters in the site name, but go to a familiar address or use a bookmark. ... And you will be taken to a scam site that looks exactly like a real site, where after entering your login and password all money from the account is stolen right there. Do you think this is impossible? Alas, this has become a reality.

Rogues have managed to replace the DNS.
Opennet.ru writes : “Attackers were able to successfully redirect Amazon Route 53 DNS service traffic to their host using BGP and replace MyEtherWallet.com with an Ethereum cryptocurrency web wallet for a few hours. A phishing attack was organized on the attacking clone of MyEtherWallet, which allowed in two hours to steal 215 ETH (about 137 thousand dollars). "

The only difference from this wallet was a self-signed HTTPS certificate, for which browsers issued a warning about problems with a secure connection, but what would you do when you saw such a message? I probably would have ignored it, deciding that the site "something is a little broken."

It was enough to enter a name and password on a fake wallet site and all the money was immediately transferred to scammers.

Frighteningly, the scammers turned out to be rich - now in the wallet where the stolen money was transferred, there are now more than $ 15 million. This may mean that the attack was only an experiment before a series of similar attacks of a much larger scale.

Perhaps in the near future we are waiting for a wave of online fraud of a new level.

© 2018, Alexey Nadezhin
A new era of cybercrime

Accepted, thanks!