Bitcoin Gold's GitHub repository has been attacked to inject a malicious file into one of the official wallets. If the problem now seems resolved, some users were exposed to risks last week.
Another BTG wallet incriminated
Bitcoin Gold logoThe Bitcoin Gold teams yesterday published an article evoking a new problem with a Bitcoin Gold wallet.
While we had already witnessed attempts from MyBTGWallet, which stole the private keys of its users, and Electron Gold, which was based on suspicious computer code, it is now the turn of the official wallet to ask problem.
The software reportedly sent malicious files to users who downloaded it last week:
"All users who have downloaded the file corresponding to the Windows wallet, between November 21, 2017, at 9:39 UTC [ndlr: 10h39 French time] and November 25, 2017, 22:30 UTC [note: 23:30 French time] must in no case use it. "
Users who have installed and opened the wallet, whose "checksums" do not correspond to those announced by the developers of Bitcoin Gold, are invited to immediately delete this file.
In addition, it is strongly recommended that they make sure that their computer does not contain malware or viruses. They are also invited to transfer to new addresses all the crypto-currencies that were stored on wallets accessible from this computer.
If Bitcoin Gold is plagued by many attacks, it is primarily because hackers know that a fork will be able to encourage Bitcoin holders to reveal their private keys, through a new portfolio.
Because even if Bitcoin Gold did not arouse great enthusiasm at the announcement of its creation, it was exchanged at the time of writing this article, more than 360 dollars - enough to generate interest from the users holding multiple Bitcoins in their wallet.
Always check the fingerprints ("cheksums") of the software portfolios that you download
CheckCe Incident icon remembers users to always check that the "checksum" provided by the developers matches that of the downloaded software.
Thus, those who had verified their download with the SHA-256 checksum provided by Bitcoin Gold could immediately realize that the file was contentious. On the contrary, those who downloaded it without suspicion exposed themselves, and put at risk all of their Bitcoins.
Bitcoin Gold's teams have since managed to secure their GitHub page - but the damage was unfortunately already done.
An unknown agent managed to access the GitHub repository, and replaced the windows file with another file. Before it can be analyzed thoroughly, we do not know what its purpose was. We do know, however, that the file does not immediately trigger alerts on anti-virus / anti-virus software. The Linux version has not been modified. "
Whatever fork it is, it is always recommended not to rush on new wallets, and wait a few weeks before trying to get his corners.
Note that these wedges are allocated based on the balance of a portfolio, at a time t. It is therefore possible to start by transferring its Bitcoins to another address, so as not to expose them to risks when using a new wallet.
The developers also indicated that their GitHub repository was now secure, and that they did not believe in a second attack.
At the time of writing this article, there was no case of proven theft, related to the use of the offending portfolio.
Another problem with a wallet
In just a few days, this is the second problem with a Bitcoin Gold portfolio.
Indeed, we told you that MyBTGWallet.com, a site claiming to help users get their Bitcoin Gold, was actually only to steal their Bitcoins. The service has managed to draw more than $ 3 million worth of digital assets.
The victims of this robbery have gathered, and seem determined to find the culprit and to sue. It is a certain John Dass who would have proposed a suspicious "check verification" service, before putting on line a wallet containing a malicious code, intended to obtain the private keys of the users.
If you currently hold crypto-currencies, start from a simple premise: Thousands of people are probably looking for methods that could allow them to grab them ...
Commentaires
Enregistrer un commentaire