{"id":257627,"date":"2018-04-25T10:28:50","date_gmt":"2018-04-25T08:28:50","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=257627"},"modified":"2018-04-25T10:30:27","modified_gmt":"2018-04-25T08:30:27","slug":"hacker-steals-over-r4-million-from-myetherwallet-users","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/cryptocurrency\/257627-hacker-steals-over-r4-million-from-myetherwallet-users.html","title":{"rendered":"Hacker steals over R4 million from MyEtherWallet users"},"content":{"rendered":"<p>Hundreds of MyEtherWallet users had their Ethereum stolen after an attacker hijacked DNS registration servers.<\/p>\n<p>The wallet provider <a href=\"https:\/\/twitter.com\/myetherwallet\/status\/988830652526092288\" target=\"_blanK\"><strong>confirmed the attack on Twitter<\/strong><\/a>, stating that many users were redirected to a phishing site instead of the legitimate MyEtherWallet page.<\/p>\n<p>Affected users were presented with an invalid security certificate warning upon being redirected, but many ignored this and continued to access their Ethereum wallets.<\/p>\n<p>According to <a href=\"https:\/\/twitter.com\/InternetIntel\/status\/988841601400270848\" target=\"_blank\" rel=\"noopener\"><strong>Internet Intelligence<\/strong><\/a>, it was Amazon&#8217;s DNS that was hijacked, and any users who used these DNS servers were vulnerable.<\/p>\n<p>The attacker siphoned funds to at least <a href=\"https:\/\/etherscan.io\/address\/0xf203a3b241decafd4bdebbb557070db337d0ad27\" target=\"_blank\" rel=\"noopener\"><strong>two<\/strong><\/a> <a href=\"https:\/\/etherscan.io\/address\/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29\" target=\"_blank\" rel=\"noopener\"><strong>addresses<\/strong><\/a>, which are now tagged on Ethereum block explorer Etherscan as Fake_Phishing900.<\/p>\n<p>The addresses show that at least 523 Ethereum was stolen from MyEtherWaller users, which is around R4.2 million.<\/p>\n<p>The funds have since been moved from the original addresses used in the attack.<\/p>\n<p>&#8220;This redirecting of DNS servers is a decade-old hacking technique that aims to undermine the Internet\u2019s routing system,&#8221; said MyEtherWallet in a <a href=\"https:\/\/np.reddit.com\/r\/MyEtherWallet\/comments\/8eloo9\/official_statement_regarding_dns_spoofing_of\/\" target=\"_blank\" rel=\"noopener\"><strong>statement<\/strong><\/a>.<\/p>\n<p>&#8220;It can happen to any organisation, including large banks. This is not due to a lack of security on the MyEtherWallet platform,&#8221; said MyEtherWallet.<\/p>\n<h3 class=\"my-4\">Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/cryptocurrency\/257595-bitcoin-surges-while-stock-market-falls.html\" rel=\"bookmark\">Bitcoin surges while stock market falls<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Hundreds of MyEtherWallet users had their Ethereum stolen.<\/p>\n","protected":false},"author":23,"featured_media":241980,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[44696],"tags":[30594,191,50305,42124,45665],"class_list":["post-257627","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-amazon-web-services","tag-cryptocurrency","tag-dns-hijack","tag-ethereum","tag-myetherwallet"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/257627"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=257627"}],"version-history":[{"count":2,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/257627\/revisions"}],"predecessor-version":[{"id":257637,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/257627\/revisions\/257637"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/241980"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=257627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=257627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=257627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}