Hackers turn to old tricks to beat secure bitcoin protocols

The Hindu Business Line, KV KURMANATH, January 28, 2018, HYDERABAD

Hackers quickly turn their eyes to places where the money is. Finding the buzz around bitcoins across the world, they are trying to exploit the euphoria. The users have either lost huge amounts of money or on the verge of losing it. Technically, experts say, the bitcoin protocol is difficult to barge in. This, they feel, would mar the image of crypto currencies, whose USP being a safe currency.
Bugs in the wallets, traditional techniques that can make your devices slaves to hackers and vulnerabilities in the bitcoin exchange market places are some of the methods that hackers are using to target the bitcoin users.
Moreover, over 40 exchanges have disappeared into the thin air so far, some maybe on genuine reasons and others due to fraud or cyber compromises.
"The underlying technology architecture and encryption standards of the Bitcoin protocol is difficult to exploit. Attackers are using easier routes to exploit crypto currency, especially through users, wallets and exchange applications,” Rajat Mohanty, the Co-founder and Chief Executive Officer of Paladion Networks, has said.
The attackers are using social engineering techniques to get access to the e-wallets and encryption key from the bitcoin users. They are also using the old trick of gaining access to a PC or a mobile and taking them under their control to prevent access to their bitcoin wallet.
“Their devices are held up until they pay the ransom. Attackers can also using sniffing technique in a local network to uncover a particular user’s bitcoin transaction,” he said.
“There are several hundred bitcoin exchanges and they are as open to hack as any website, because they are just yet another web application. Mt Gox, Bitfinex, Bithumb or more recent Nicehash are some examples. These exchanges and market places are not regulated. Some exchanges could be highly unreliable.
Crypto currencies such as bitcoin are irreversible in nature, and has no insurance protection against loss, so any cyber compromise can lead to permanent loss. It therefore needs a much higher level of security protection than other technologies.
‘Fear of Missing Out'
“The bitcoin valuation surge is a speculation by media and the fear-of-missing-out mentality of the investing community. By now 80 per cent of the bitcoin in the world is mined already and is out for consumption. Challenge in the crypto world is how to kill the speculation for price stability,” Deric Karunesudas, Business Development Manager (Cyber Security) of Dimension Data, India, said.
“The weakness lies in the wallet which stores the bitcoins and has our private keys,” he felt.
Block chain protection
Technically, cryptocurrencies have a secure method to share, store, and record data transparently through blockchain technology, to Zac Cheah, Chief Executive Officer of of Pundi X, pointed out.
Headquartered in Indonesia, Pundi X is an ecosystem that supports blockchain developers and token holders to sell cryptocurrency and services at any physical store in the world.
“The vulnerabilities involved with crypto currencies can be attributed to two major causes - first, human errors, such as you lose or forget your private key to retrieve your digital properties, or you share your private key with someone else. Second, hacking of wallets and exchanges,” he said.
Minimising risks
To minimise the risks from third party mechanical errors, you can consider using a digital wallet and keep your private key at your own risk.
“Or you can take your digital wallet offline, which are referred to as cold wallets. In this way, you can free from worrying vulnerabilities from the third party exchange platforms,” he said.


Comments

Post a Comment

Popular posts from this blog

India Joins Russia in Voting Against West-Backed Move to Expand Powers of OPCW

The Wire: June 28, 2018 New Delhi: India voted against a UK-backed move that will allow the global chemical weapons watchdog to apportion blame for illegal attacks, criticising the decision to grant “unchecked powers” to the head of the group which could be used for “partisan” purposes. On Wednesday, more than two-thirds of the member states of the Organisation for the Prohibition of Chemical Weapons (OPCW) voted to authorise the international body to identify the perpetrators and sponsors of a chemical weapons attack. It also specifically called on the OPCW’s technical secretariat to begin work on identifying the perpetrators behind the use of chemical weapons in Syria. The draft decision, sponsored by 30 countries, was adopted at the fourth special session of the conference of the states parties to the Chemical Weapons Convention at the Hague, with 82 in favour and 24 negative votes. While Europe, the United States and their allies voted ‘yes’, there was strong oppo...
Read more

As financial insecurity rises in urban India, so does investment in insurance

Image
Scroll.in March 13, 2020 Urban Indians are becoming less confident about their financial security. Up to 58% of them fret over financial independence post retirement, which is a 4% increase from last year. An equal share of urban Indians worry about meeting their daily medical expenses and sustaining their current lifestyle once they stop working. The findings are part of a survey published by Delhi-based Max Life Insurance in association with London-based consultancy Kantar. The firms surveyed 7,014 respondents in 25 cities, including six metros, nine tier-1 cities, and 10 tier-2 cities, between December 2019 and January 2020. Source: Max Life Insurance via Quartz The trends Source: Max Life Insurance via Quartz Source: Max Life Insurance via Quartz Source: Max Life Insurance via Quartz A significant share of urban Indians also say their families will have no financial support in the event of the breadwinner’s death. In such a scenario, around 57% believe the family sav...
Read more

ED tracks Swiss Bank A/Cs of Agusta scamster

The Poineer February 10,2019 Rakesh K Singh The Enforcement Directorate (ED) has tracked a dozen Swiss bank accounts in the name of Rajiv Saxena, who is key accused in the Rs 3,600 crore AgustaWestland VVIP chopper scam. The ED has also found out accounts held by  his family members and associates where the kickbacks in the now scrapped deal were allegedly parked. Two bank accounts are in the name of Rajiv Saxena’s  associates Pankaj Jain and Sumita Jain who are also the authorised signatories. The  third is in the name of another associate Ajit Singh Bubber, but Rajiv and his family members are authorised signatories. The remaining nine accounts are largely owned and operated by Rajiv, his family members and associates. Rajiv Saxena was deported by the UAE authorities on January 30 and the ED formally arrested him the next day and a court later granted his remand to the agency. He is currently undergoing custodial interrogation by the ED. The agency had in 2017...
Read more