Crypto theft via hijacked domain: cow.fi phishing nets millions
Cybercriminals temporarily seized the internet address of a DeFi service and stole digital currencies worth approximately 1.2 million US dollars.
Crypto theft via hijacked domain: cow.fi phishing nets millions
Unknown perpetrators temporarily took over the domain of a decentralised finance service and caused damage worth millions. Via the hijacked address cow.fi, they redirected visitors to a fake website through which they diverted digital currencies worth approximately 1.2 million US dollars.
The incident apparently resulted from a synchronisation problem between the body that manages internet addresses and the provider that registered them. This failure enabled the attackers to temporarily gain control of the address.
The security incident was covered in a recent episode of the "Passwort" podcast by heise security. The moderators also addressed a recent technical incident at DENIC, the German domain registry. An expert on the DNSSEC security protocol explained the causes of an outage that affected numerous users.
A vulnerability named YellowKey, which targets Bitlocker encryption software on Windows, was also discussed. Experts are still debating whether this flaw actually allows complete circumvention of disk encryption.
Source: heise online
Source: Google News LU DE