After a quick hiatus, the infamous “Blockchain Bandit” has re-emerged because the yr ends, consolidating a staggering 51,000 ETH, valued at roughly $172 million, right into a single multisig pockets.
This switch was made on December 30.
“Blockchain Bandit” Returns
Within the newest replace, outstanding blockchain investigator ZachXBT revealed that the consolidation originated from 10 wallets, which have been dormant for nearly two years, with the final exercise being flagged in January 2023. Alongside the Ether switch, 470 BTC have been additionally moved.
The Blockchain Bandit earned infamy between 2016 and 2018 by means of an insidious method known as “Ethercombing.” By exploiting cryptographic vulnerabilities, the attacker systematically guessed weak personal keys, which have been usually generated by defective random quantity algorithms or misconfigured wallets.
This technique allowed the malicious entity to steal greater than 45,000 ETH throughout 49,060 transactions by compromising 732 personal keys. Whereas brute-forcing personal keys is mostly deemed unbelievable because of their huge numerical vary, the Bandit capitalized on predictable flaws reminiscent of non-random key technology and poorly carried out restoration phrases.
Cybersecurity analysts recommend that state-sponsored actors, presumably North Korean hacker teams, may very well be behind the assaults, noting parallels with different large-scale crypto thefts. Such teams are identified to focus on cryptocurrency platforms to fund illicit operations, together with weapons packages.
The Bandit’s latest exercise – coupled with the usage of multi-signature wallets – alerts preparations for doubtlessly laundering the funds by means of mixers or decentralized exchanges to obscure their origins.
From Pretend Conferences to Seed Phrase Traps
This attacker’s resurgence comes amid a wider uptick in crypto cybercrime as fraudsters develop new methods to ensnare unsuspecting targets. Earlier this month, hackers have been reported to have exploited faux Zoom assembly hyperlinks to focus on crypto customers and steal delicate credentials in addition to digital property.
SlowMist traced the malware’s code to Russian-linked operatives, revealing over $1 million transformed to ETH.
One other rip-off focused opportunistic thieves by sharing seed phrases of pretend crypto wallets. As soon as accessed, the wallets demand TRX for transaction charges, rerouting funds to scammers as an alternative. Kaspersky warns that this scheme, disguised as a newbie’s mistake, manipulates thieves into turning into victims of their very own greed.
The submit Infamous ‘Blockchain Bandit’ Resurfaces, Strikes 51,000 ETH in Largest Fund Switch appeared first on CryptoPotato.