Posts


Apr. 17, 2018

Crypto YouTuber hacked out of $2M during a livestream

Crypto YouTuber hacked out of $2M during a livestream

The wallet transactions on Etherscan show that almost all of Balina’s tokens were withdrawn from his account during the livestream. This included more than 20 million Nucleus Vision, 2 million Pareto Network, and 1 million Loom among others.

Source: thenextweb.com

Apr. 17, 2018

US Navy Accused of Tech Piracy

US Navy Accused of Tech Piracy

The Navy is entangled in two long-running federal court cases involving IP theft. In March, German software company Bitmanagement asked a federal court for a summary judgement after accusing the Navy of illegally installing $600 million in software on more than 500,000 computers.

Source: vice.com

Apr. 17, 2018

Facial recognition cameras on lamp posts to be tested in Singapore

Facial recognition cameras on lamp posts to be tested in Singapore

Singapore last year announced that it wants to convert every single lamp post in the country – there are about 110,000 in the island state – into an interconnected network of wireless sensors.

Source: sophos.com

Apr. 17, 2018

Roaming Mantis uses DNS hijacking to infect Android smartphones

Roaming Mantis uses DNS hijacking to infect Android smartphones

In March 2018, Japanese media reported the hijacking of DNS settings on routers located in Japan, redirecting users to malicious IP addresses. The redirection led to the installation of Trojanized applications named facebook.apk and chrome.apk that contained Android Trojan-Banker. According to our telemetry data, this malware was detected more than 6,000 times, though the reports came from just 150 unique users (from February 9 to April 9, 2018).

Apr. 17, 2018

The Bitcoin Standard – a critical review

The Bitcoin Standard – a critical review

There is no better evidence for this than the fact that the rarest metal in the crust of the earth, gold, has been mined for thousands of years and continues to be mined in increasing quantities as technology advances over time, as shown in Chapter 3. If annual production of the rarest metal in the earth’s crust goes up every year, then it makes no sense to talk of any natural element as being limited in its quantity in any practical sense.

Apr. 17, 2018

IRS Says Fewer Than 100 People Have Reported Bitcoin Holdings So Far

IRS Says Fewer Than 100 People Have Reported Bitcoin Holdings So Far

Credit Karma Tax, the tax prep branch of the popular credit score site, said April 13 that fewer than100 of the 250,000 most recent tax filers through the servicehave reported cryptocurrency transactions. One of the biggest questions this tax season has been the impact that last year’s cryptocurrency boom would have on filers across the U.S. In 2017, cryptocurrencies became among the very trendiest investment (or speculation, depending upon your perspective) opportunities.

Apr. 17, 2018

WhatsApp photo drug dealer caught by ‘groundbreaking’ work

WhatsApp photo drug dealer caught by ‘groundbreaking’ work

A pioneering fingerprint technique used to convict a drugs gang from a WhatsApp message ‘is the future’ of how police approach evidence to catch criminals.

Source: bbc.com

Apr. 15, 2018

Microsoft Engineer Charged in Reveton Ransomware Case

Microsoft Engineer Charged in Reveton Ransomware Case

The accused is Raymond Uadiale, 41, a naturalized US citizen of Nigerian descent, who currently works for Microsoft in Seattle since 2014, according to his LinkedIn page.

Source: bleepingcomputer.com

Apr. 15, 2018

Understanding Bitcoin Transactions

Understanding Bitcoin Transactions

How hard could it be to send some bitcoin from a JavaScript library? I decided to try on the ‘testnet’. I downloaded Bitcoin Core, configured it for the testnet, waited a few hours for it to sync the testnet blockchain, created an ‘address’, and found a ‘testnet faucet’ to send my new address some testnet bitcoin.

Source: jonathanotto.com

Apr. 15, 2018

CVE-2017-0263 – reported exploit used to interfere the French election

CVE-2017-0263 – reported exploit used to interfere the French election

CVE-2017-0263 is a UAF vulnerability in Menu Management Component in win32k kernel module of Windows operating system, which was reported to be used to attack with an EPS vulnerability to interfere the French election. This article will simply analyze the CVE-2017-0263 part of the attacking sample in order to come up with the operation principle and basic exploiting idea of this vulnerability, and make a brief investigation into the Menu Management Component of Windows Window Manager Subsystem. The analyzing environment is Windows 7 x86 SP1 basic virtual machine.

Apr. 14, 2018

This coal power plant is being reopened for blockchain mining

This coal power plant is being reopened for blockchain mining

That’s the idea behind the Blockchain Application Centre — an Aussie tech initiative that will see one of the country’s now-shuttered coal-fired power plants reopened to provide cheap power for blockchain applications.

Source: cnet.com

Apr. 14, 2018

Agent Smith: How I Build a Profitable Crypto Arbitrage Bot

Agent Smith: How I Build a Profitable Crypto Arbitrage Bot

Inefficiencies exploitable by arbitrage are inherintly zero sum: there is only a fixed amount of money to be made, and a lot of people are out to get it. This is the reason you won’t find any good arbitrage bots online.

Source: wizb.it

Apr. 14, 2018

People Who Own Cryptocurrency Are Getting Slammed With More Taxes Than They Expected

People Who Own Cryptocurrency Are Getting Slammed With More Taxes Than They Expected

The IRS has since clarified that virtual currency is to be “treated as property for US federal tax purposes,” meaning any gains between the time bitcoins were bought and when they were sold (due to price deflation) must be treated as capital gains. Yet four years since Cross’s Reddit post, paying cryptocurrency taxes hasn’t gotten much easier. After Bitcoin’s biggest year yet—with a high of $19,000 USD for one bitcoin in December—most clients are getting hit with way more taxes than they anticipated.

Apr. 14, 2018

Malware monitor – leveraging PyREBox for malware analysis

Malware monitor – leveraging PyREBox for malware analysis

In July 2017 we released PyREBox, a Python Scriptable Reverse Engineering Sandbox as an open source tool. This project is part of our continuous effort to create new tools to improve our workflows. PyREBox is a versatile instrumentation framework based on QEMU.

It allows us to run a whole operating system in a virtual environment (emulator), and to inspect and modify its memory and registers at run-time. A small set of QEMU modifications allows users to instrument certain events such as instruction execution or memory read/writes.

Apr. 13, 2018

Coinsecure, not so secure: Millions in cryptocurrency stolen, CSO branded as thief

Coinsecure, not so secure: Millions in cryptocurrency stolen, CSO branded as thief

Coinsecure has become the latest in a long line of cryptocurrency exchanges which has lost investor funds to attack — but in this case, it appears to be an inside job.

Source: zdnet.com

Apr. 13, 2018

Goodbye ICOs, hello ILPs?

Goodbye ICOs, hello ILPs?

The gold-rush mentality currently surrounding the use of initial coin offerings (ICOs) has at times led to projects being used irresponsibly and investors suffering harm as a result. To date, no jurisdiction has provided a bespoke set of legal and technical controls to manage this risk. Instead, some have acted retrospectively by either banning ICOs or applying existing regulatory frameworks relating to other asset classes that are not necessarily compatible.

Apr. 13, 2018

An Alleged $660 Million ICO Scam Sparked a Protest In Vietnam

An Alleged $660 Million ICO Scam Sparked a Protest In Vietnam

According to Reuters, dozens of people gathered outside the offices of Modern Tech JSC alleging “the largest ever cryptocurrency fraud involving 15 trillion dong,” which works out to more than $650 million USD. According to local news outlet Tuoi Tre News, the protesters allege that Modern Tech defrauded more than 30,000 investors by encouraging them to invest in digital tokens—called IFan and Pincoin—with the promise of regular payouts in real money.

Apr. 13, 2018

Cops Around the Country Can Now Unlock iPhones, Records Show

Cops Around the Country Can Now Unlock iPhones, Records Show

A Motherboard investigation has found that law enforcement agencies across the country have purchased GrayKey, a relatively cheap tool for bypassing the encryption on iPhones, while the FBI pushes again for encryption backdoors.

Source: vice.com

Apr. 13, 2018

List of the top smart contract vulnerabilities

List of the top smart contract vulnerabilities

This project is an initiative of NCC Group. It is an open and collaborative project to join efforts in discovering smart contract vulnerabilities within the security community.

Source: dasp.co

Apr. 13, 2018

PowerHammer: Exfiltrating Data from Air-Gapped Computers through Power Lines

PowerHammer: Exfiltrating Data from Air-Gapped Computers through Power Lines

In this paper we provide an implementation, evaluation, and analysis of PowerHammer, a malware (bridgeware [1]) that uses power lines to exfiltrate data from air-gapped computers. In this case, a malicious code running on a compromised computer can control the power consumption of the system by intentionally regulating the CPU utilization. Data is modulated, encoded, and transmitted on top of the current flow fluctuations, and then it is conducted and propagated through the power lines.