{"id":155300,"date":"2016-02-16T09:24:15","date_gmt":"2016-02-16T07:24:15","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=155300"},"modified":"2016-02-16T09:26:23","modified_gmt":"2016-02-16T07:26:23","slug":"bitcoin-password-cracking-attacks-made-hackers-103000","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/155300-bitcoin-password-cracking-attacks-made-hackers-103000.html","title":{"rendered":"Bitcoin password cracking attacks made hackers $103,000"},"content":{"rendered":"<p>Hackers have cleaned out around $103,000 worth of Bitcoin from accounts protected with passwords, instead of the the long cryptographic keys normally required.<\/p>\n<p>This is according to a <strong><a href=\"http:\/\/arstechnica.com\/security\/2016\/02\/password-cracking-attacks-on-bitcoin-wallets-net-103000\/\">report on Ars Technica<\/a><\/strong>, citing a recently published research paper titled \u201c<strong><a href=\"http:\/\/fc16.ifca.ai\/preproceedings\/36_Vasek.pdf\" target=\"_blank\">The Bitcoin Brain Drain: A Short Paper on the Use and Abuse of Bitcoin Brain Wallets<\/a><\/strong>\u201d.<\/p>\n<p>Called \u201cbrain wallets\u201d, security experts had long warned that the alternative security measure is a bad idea and should not be used.<\/p>\n<p>Brain wallet passwords do not use a cryptographic salt and are passed through a single iteration of the SHA\u2013256 hashing function.<\/p>\n<p>A form of these insecurely hashed passwords are also stored in the Bitcoin blockchain, giving hackers everything they need to compromise the accounts.<\/p>\n<p>The paper tracked attacks over a six year period, and found that hackers had cracked the passwords of 884 brain wallets, taking 1,806 Bitcoins.<\/p>\n<p>\u201cIn total, approximately $100K worth of bitcoin has been loaded into brain wallets, with the ten most valuable wallets accounting for over three-quarters of the total value,\u201d the researchers said.<\/p>\n<p>\u201cMany brain wallets are drained within minutes, and while those storing larger values are emptied faster, nearly all wallets are drained within 24 hours.\u201d<\/p>\n<h3 id=\"related\">More security news<\/h3>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/security\/155278-anonymous-hacks-and-leaks-south-african-government-data.html\"><strong>Anonymous hacks and leaks South African government data<\/strong><\/a><\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/security\/153644-networks-in-south-africa-that-host-malware-and-botnets.html\"><strong>Networks in South Africa that host malware and botnets<\/strong><\/a><\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/security\/153644-networks-in-south-africa-that-host-malware-and-botnets.html\"><strong>Networks in South Africa that host malware and botnets<\/strong><\/a><\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/security\/155104-the-south-african-government-passwords-cracked-in-anonymous-database-hack.html\"><strong>The South African government passwords cracked in Anonymous database hack<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Poorly secured accounts are cracked within minutes or even seconds after going live.<\/p>\n","protected":false},"author":23,"featured_media":149097,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[36,187,35506],"class_list":["post-155300","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-active","tag-bitcoin","tag-bitcoin-brain-wallets"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/155300"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=155300"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/155300\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/149097"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=155300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=155300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=155300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}