{"id":12434,"date":"2019-02-18T00:00:00","date_gmt":"2019-02-18T00:00:00","guid":{"rendered":"https:\/\/crypto-economy.com\/2019\/02\/18\/coinbase-blockchain-security-engineer-keeps-a-track-on-the-phishing-campaigns-on-the-electrum-network\/"},"modified":"2019-02-18T00:00:00","modified_gmt":"2019-02-18T00:00:00","slug":"coinbase-blockchain-security-engineer-keeps-a-track-on-the-phishing-campaigns-on-the-electrum-network","status":"publish","type":"post","link":"https:\/\/crypto-economy.com\/coinbase-blockchain-security-engineer-keeps-a-track-on-the-phishing-campaigns-on-the-electrum-network\/","title":{"rendered":"Coinbase Blockchain Security Engineer Keeps a Track on the Phishing Campaigns on the Electrum Network"},"content":{"rendered":"<p style=\"text-align: justify\">According to a <strong><a href=\"https:\/\/blog.coinbase.com\/electrohunt-part-1-hunting-for-the-phishing-campaigns-on-the-electrum-network-b10529162e63\" target=\"_blank\" rel=\"noopener\">blog post by Coinbase<\/a>,<\/strong> the platform\u2019s Blockchain Security Engineer, Peter Kacherginsky <strong>has been tracking the phishing campaigns on the Electrum Network<\/strong>, a lightweight Bitcoin client based on a client-server protocol that was released about 8 years ago.<\/p>\n<p style=\"text-align: justify\"><!--more--><\/p>\n<p style=\"text-align: justify\">The main push towards this move is the fact that users of the Electrum Wallet have continuously been attacked since December last year resulting to massive losses. The <strong><a href=\"https:\/\/crypto-economy.com\/electrum-wallet-review-complete-guide\/\" target=\"_blank\" rel=\"noopener\">Electrum Wallet<\/a> is one of Bitcoin\u2019s most popular Wallets.<\/strong> Other features of the Electrum Wallet include;<\/p>\n<ul>\n<li style=\"text-align: justify\">\u00a0It is an encrypted wallet with Bitcoin private keys that are protected with a password and never leaves the user\u2019s computer<\/li>\n<li style=\"text-align: justify\">\u00a0It offers deterministic key generation that allows users to recover their lost wallets through a recovery seed<\/li>\n<li style=\"text-align: justify\">\u00a0Electrum servers are decentralized and redundant, therefore users can never experience downtimes<\/li>\n<li style=\"text-align: justify\">\u00a0It supports 3rd party \u00a0plugins such as the Multisig services, Hardware wallets, etc<\/li>\n<li style=\"text-align: justify\">\u00a0It is fast, secure and easy to use<\/li>\n<\/ul>\n<p><a href=\"https:\/\/crypto-economy.com\/wp-content\/uploads\/2022\/12\/electrum.jpg\"><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-full wp-image-111771\" src=\"https:\/\/crypto-economy.com\/wp-content\/uploads\/2022\/12\/electrum.jpg\" alt=\"electrum wallet\" width=\"700\" height=\"245\" \/><\/a><\/p>\n<h2 style=\"text-align: justify\"><strong>The Phishing Attack<\/strong><\/h2>\n<p style=\"text-align: justify\">The attack begun just recently in December, whereby an alleged hacker or group of hackers pulled off a phishing attack on the popular Electrum Wallet and tricked users, and stole their funds. Apparently, <strong>the hacker(s) created a fake version of the wallet that fooled users<\/strong> into providing password information.<\/p>\n<p style=\"text-align: justify\">According to Peter, the Electrum Wallet once had a feature that displayed error messages sent by the server as a way of informing users of the reason for their transactions not going through.<\/p>\n<p style=\"text-align: center\">He says that; \u2018<em>\u2019exposing users to arbitrary messages from an un-trusted network of servers operated by unknown parties is ripe for exploitation\u2019\u2019.<\/em><\/p>\n<p style=\"text-align: justify\">Peter tries to deeply look into how the attackers managed to force a wallet to connect to them and display malicious messages, as well as what the servers used are. Apparently, the attacker(s) learned how to modify the ElectrumX server software allowing it to always send arbitrary error messages.<\/p>\n<p style=\"text-align: justify\">The error message then leads to a phishing site where several versions of the Electrum Wallet are readily available for download. <strong>After users download the fake updates, the hacker(s)\u2019version of Electrum wallet steals all their funds.<\/strong><\/p>\n<p style=\"text-align: justify\">Peter discovered that <strong>the phishing website created by the attacker(s) was almost similar to the original website<\/strong> and even posted announcements on the current version of Electrum Wallet. However, the file hashes did not match the original. He leaves an advice for all users of the wallet to remain vigilant and only download software from trusted sources.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>According to a blog post by Coinbase, the platform\u2019s Blockchain Security Engineer, Peter Kacherginsky has been tracking the phishing campaigns on the Electrum Network, a lightweight Bitcoin client based on a client-server protocol that was released about 8 years ago.<\/p>\n","protected":false},"author":5,"featured_media":12435,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[102,84,74],"tags":[4642,5001],"_links":{"self":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/12434"}],"collection":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/comments?post=12434"}],"version-history":[{"count":0,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/12434\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media\/12435"}],"wp:attachment":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media?parent=12434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/categories?post=12434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/tags?post=12434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}