Home > News > Cryptocurrency Theft Involved Traffic Redirection • Bookmark   • Newsletters   • Register Search Options

NEWS STORY

Cryptocurrency Theft Involved Traffic Redirection

Cryptocurrency Theft Involved Traffic Redirection
Get XBIZ News
Aug 13, 2014 5:15 PM PDT    Text size: 

LOS ANGELES — With more online companies accepting cryptocurrency as an alternative payment, there have been more reported instances of cybercrimes.

In the latest case, a Dell research team announced that it discovered a scheme to hijack large amounts of network traffic and redirect cryptocurrency miner connections to a hijacker-controlled mining pool, resulting in $83,000 stolen from accounts in four months.

The scheme, Dell researchers said, involved BGP hijacking, which has been discussed for more than 16 years by Internet security experts, to shake cryptocurrency out of the hands of miners.

Hackers in the late 1990s testified to Congress that they could use a BGP attack to take down the Internet in 30 minutes. In 2013, the BGP hijacking scheme redirected a portion of U.S. traffic to Iceland and Belarus.

Border gateway protocol, or BGP, connects networks on the Internet, such as Time Warner and Comcast, to become aware of other networks' existence. Both ends of BGP-connected networks must be manually configured to communicate, ensuring that malicious networks can't hijack traffic without human intervention from a legitimate network.

Dell researchers said the scheme involved bogus BGP broadcasts to redirect traffic to the hijacker's server. In the end, perpetrators were able to steal Bitcoin, Dogecoin, HoboNickels and Worldcoin.

"Hijackers harnessed miners' hashing power by redirecting legitimate mining traffic destined for well-known pools to a malicious server masquerading as the legitimate pool," Dell researchers said.

With cryptocurrency, "mining" is the act of validating transactions listed in the public ledger— also known as the block chain, which entails crunching numbers to satisfy a particular formula while simultaneously agreeing as network that the calculated results are valid.

"Hijackers harnessed miners' hashing power by redirecting legitimate mining traffic destined for well-known pools to a malicious server masquerading as the legitimate pool," Dell researchers said of the scheme uncovered.

In total, Dell researchers documented 51 compromised networks from 19 different ISPs, including Amazon, Digital Ocean, OVH and other large hosting companies between February and May 2014.

"All malicious BGP announcements were traced to a single router at an ISP in Canada. The hijacker likely fits one of the following descriptions: A rogue employee of the ISP,  a rogue ex-employee of the ISP with an unchanged router password, or a malicious hacker," the researchers said.

Online adult companies have come to embrace cryptocurrencies as a substitute for traditional methods of processing transactions. MindGeek, SCORE Group, Naughty America, Wicked Pictures, Porn.com, Grooby.com, DominicFord.com, ClassyCams.com and MetArt.com, among other adult brands, take cryptocurrencies. Internet payment service provider Verotel also accepts bitcoin for transactions.

   

More ways to get XBIZ News:  RSS Feeds  |  E-Newsletters  |  Desktop Widget  |  Mobile
Looking for porn star news and behind-the-scene videos? Check out XFANZ.com !

BUSINESS ANALYSIS

Adult Biz Faces More Obstacles Past Prop. 60 Battle

On Feb. 1, I completed 365 days as the Free Speech Coalition’s executive director. It was a turbulent first year, and when I received the 2017 XBIZ Industry Leadership Award I was startled, humbled... More »

Ad Networks: A Look at Compliance Issues

Among the major concerns of online marketers when evaluating advertising creatives are the return on investment, click-through and engagement rates, (re)targeting and opportunities for micro-tuning monetization.... More »

Ad Networks: Maximizing Precious Time and Resources

For traffic-savvy adult website operators and marketers, buying ad space and premium placement on select sites is a proven method for attracting audiences. This has traditionally involved studying a site’s... More »
XBIZ NEWSLETTERS
Stay informed of the latest industry developments. Get XBIZ newsletters delivered to your inbox. Subscribe today!
Enter email address:

* To manage existing subscriptions click here.






POPULAR PRODUCTS & SERVICES
Submit your press release to
multiple news outlets with 1 click.
Subscribe to RSS news feeds or
add free content to your website.
Access XBIZ news and articles
with your mobile device.
Subscribe to XBIZ World magazine, the industry's leading e-commerce trade publication, delivering in-depth coverage of the online, mobile and ancillary digital markets.

UPCOMING EVENTS

EXXXOTICA Denver

Mar 31 - Apr 02
Denver, CO.

Eurowebtainment 2017

May 17 - May 20
Majorca, Spain

XBIZ Retreat

May 30 - Jun 03
Miami, Florida

XBIZ Miami 2017

May 30 - Jun 02
Miami, Florida
Everyday thousands of business professionals browse XBIZ's industry directory for quality products and services. Not listed yet? Your company could be losing potential new business. Submit your company today!
Use XBIZ RSS feeds to stay informed of the latest industry developments or as a content syndication tool for your website!