@krazykewlgamez @bondibox Doesn't explain how my mac security was breached but it's a start...
English
Community Node
390 posts
Community Node
@community_node
#TRON Super Representative Candidate #TRONSR https://t.co/8qJhYVcPap
Katılım Nisan 2018
1.4K Takip Edilen1.3K Takipçiler
Doesn't explain how my mac security was breached but it's a start...
Microsoft Threat Intelligence@MsftSecIntel
A new info-stealing malware we first saw being sold in the cybercriminal underground in June is now actively distributed in the wild. The malware is called Anubis and uses code forked from Loki malware to steal system info, credentials, credit card details, cryptocurrency wallets
English
Doesn't explain how my mac security was breached but it's a start...
Jason Neely@bondibox
Doesn't explain how my mac security was breached but it's a start...
English
UPDATE: @binance security team has investigated and found that the common address used is ChangeNow, a VPN IP was used to access Binance, and the funds were converted to XMR and withdrawn. I asked if they can be stopped and haven't received a reply on that. #TRX #TRON
Community Node@community_node
We've been hacked. 530k #TRX transferred to a @binance account. PK has never been stored on this laptop - we were logged into #tronscan with a keystore. It's unacceptable that tronscan is not open source. This address has stolen 11 million TRX in 3 days. #TRON
English
Is there any update @cz_binance @binance @justinsuntron @Tronfoundation ?
I'm starting to think telegram is the attack vector. Someone I know just got "deltree C sub" d
Community Node@community_node
Take a look at this guy's transactions. That's about 25 $TRON wallets a day that are getting cleaned out. More than 15,000 transfers to/from this address. Many wallets (like ours) were emptied in multiple transfers. #TRX @Tronfoundation @justinsuntron tronscan.org/#/address/THGw…
English
@NickiDotdk @binance The article outlining the vulnerability showed how easy it is to add an embedded circuit for full access.
English
@community_node @binance As long as you fully reset it you should be good to go. I haven’t heard of any hardware hacks to ledgers. Just make sure to get 24 new recovery words on initiation, and not use any that might have been included. Heard of someone being scammed by using passphrases he received 🤦🏼♂️
English
English
@community_node @Tronfoundation @justinsuntron I emptied my mobile token wallets and put all in hardware wallet :/
English
Take a look at this guy's transactions. That's about 25 $TRON wallets a day that are getting cleaned out.
More than 15,000 transfers to/from this address. Many wallets (like ours) were emptied in multiple transfers. #TRX @Tronfoundation @justinsuntron
tronscan.org/#/address/THGw…
English
@krazykewlgamez @Tronfoundation @justinsuntron The only way a database like that could exist is if there was a backdoor in java-tron, or if tronscan collected authorizations on the server side which I was assured they didn't.
English
@KinToshiGG @PiterSpain @cornycoin69 @binance TRUE. I always use a bookmark. DNS spoofing is a possibility, although there's a lot of backend code which is brand new and would be difficult to replicate on such short notice.
English
@PiterSpain @cornycoin69 @community_node @binance I doubt @community_node used a fake TronScan site.
English
It's safe to say he's hit THOUSANDS of wallets already. It's time to stop blaming the victims and figure out how it's being done. We might suggest enabling multi-signature to your accounts.
English
@NickiDotdk @binance I actually bought a ledger but stupidly bought it from Amazon. Even though ledger was the seller, if it comes from Amazon stock it gets comingled with the other sellers' items so there's no guarantee it didn't actually come from a scammer.
English
@community_node @binance I feel really bad for you. Hope CZ can fix it. Really get a Trezor or Ledger after this incident!!
English
This has been going on for weeks, and continued all day and continues to happen RIGHT NOW to *hundreds* of accounts. Clearly the responsible thing would be for @justinsuntron and the other #TRONSR to HALT BLOCK PRODUCTION until the exploit is identified. #TRON #TRX
Community Node@community_node
We've been hacked. 530k #TRX transferred to a @binance account. PK has never been stored on this laptop - we were logged into #tronscan with a keystore. It's unacceptable that tronscan is not open source. This address has stolen 11 million TRX in 3 days. #TRON
English
@PiterSpain I never said it was the vulnerability, I just said that for a site that is so important to the security of so many funds it really ought to be verified open source software. Shouldn't it?
English
@community_node That's not a proof of vulnerability hole. I'm not saying you are wrong but these are not proofs.
They could have a hack in their devices.
English
We've been asked for proof.
tronscan.org/#/transaction/…
tronscan.org/#/transaction/…
In the past 3 days, the receiving address has cleaned out 60 wallets worth more than 11 million TRX.
tronscan.org/#/address/THGw…
English
@john_skotts @JTS_Global @binance Well that's the mystery. Perhaps my laptop has spyware and they were able to get my PK from when I logged into wallet-cli with my keystore/password. Or somehow stole my creds while I was logged into tronscan.
English
@Smalls1139 @binance 2 possibilities: Either the software I use to access my accounts (tronscan, wallet-cli) has been compromised, or my laptop has. With 60 victims in a matter of days I am leaning toward the former possibility.
English
@community_node @binance How is that possible? This is very troubling. Nice to see @binance reach out so quickly, though. Please keep us updated on the situation. Sorry to hear this happened to you.
English
@NickiDotdk @binance This is a distinct possibility that I have a keylogger installed and it recorded my wallet-cli password, and then stole the keystore. I have heard of Mac o/s hacks.... but 60 victims in 2 days is a lot.
English
@community_node @binance Sounds like you have some serious spyware on that laptop. Maybe it is a friend or someone you know. You really can’t blame Tron or Tronscan for this. If you log in from a hacked or spyware infected laptop this can happen! ALWAYS use hardware ledgers!!!
English
@WolfHodl @PiterSpain That's definitely not a possibility. I use a bookmark to access tronscan with this browser, and I have a different default browser that I use for follow links.
English
@PiterSpain @community_node There were fake tronscan sites, that might be it.
English