Posts

Showing posts with the label cybersecurity

Are Telegram chats actually encrypted? | Protos

Authorities in France have arrested Pavel Durov, the founder of Telegram and Russia’s largest social network, VK. Last week, he was in Azerbaijan at the same time as Vladimir Putin. Around the world, hundreds of millions of Telegram users are suddenly questioning a fundamental promise of Pavel Durov: “All chats are secure.” As of May 2020, Telegram claimed that Durov was the sole financier of its messenger. The application boasts between 700 and 950 million monthly active users. Since 2017, he has repeatedly assured his fans, “Everything is secure.” However, many cybersecurity experts have questioned this characterization. Although Telegram’s end-to-end encrypted “Secret Chats” are widely regarded as a truly secure messenger between two devices, there are vulnerabilities in Telegram’s group and standard chats – dwarfing the popularity of Secret Chats by orders of magnitude. In Telegram, end-to-end encryption is optional . Creating a Secret Chat requires several extra steps and do...

South Korea plans to bolster cybersecurity and seize North's crypto

Crypto assets stolen by North Korea’s elite hacking groups and used to fund illicit weapons programs may soon be tracked and frozen by the South Korean government as it gears up to submit a new bill. According to several South Korea n government sources who spoke to Korea JoongAng Daily, officials have been working on legislation for 10 months that aims to “track and neutralize virtual coins and other crypto currency assets stolen by the North through hacking,” according to one insider. It has already gone through a round of revisions to include “practical measures to bolster national security ” at the order of president Yoon Suk Yeol, several said. One higher-up who asked to remain anonymous told the outlet that the bill will reflect the president’s concerns that “the country’s cybersecurity framework urgently needs repair” after it was “allowed…to fall into ruin in order to avoid offending North Korea” under its las...

73.3% of Q1 rug pulls happened on BNB Chain: Immunefi

Rug pulls and other frauds made up a small percentage of losses compared to hacks and exploits, the report stated. BNB Chain was the king of rug pulls in the first quarter of 2023, with over 73.3% of such scams in the entire crypto ecosystem happening on the network, according to an April 4 report from Blockchain Security firm Immunefi. The report, titled “Crypto Losses in Q1 2023,” investigated a variety of crypto hacks and scams in the first quarter of the year. It found that Ethereum and BNB Chain were the two largest targets for hackers and scammers, with 68.8% of total losses from these networks combined. BNB Chain, in particular, made up 41.3% of total losses from hacks and scams. One type of scam, in particular, reigned supreme on BNB Chain: rug pulls , a type of scam where developers raise funds and then close up shop without delivering a product or service. Immunefi stated that 73.3% of all rug pulls in the crypto ecosystem happened on BNB Chain in the first quarter. Relat...

OneKey says it's fixed the flaw that got its hardware wallet hacked in 1 second

Image
Unciphered posted a video showing a "Massive critical vulnerability" in the OneKey Mini. The creators noted it's been patched and is now working on further securing the wallet. Crypto hardware wallet provider OneKey says it has already addressed a vulnerability in its firmware that allowed one of its hardware wallets to be hacked in one second flat. On Feb. 10, a video on YouTube posted by cybersecurity startup Unciphered showed they had figured out a way to exploit a "Massive critical vulnerability" in order o "crack open" a OneKey Mini. According to Eric Michaud, a partner at Unciphered, by disassembling the device and inserting coding, it was possible to return the OneKey Mini to “factory mode” and bypass the security pin, allowing a potential attacker to remove the mnemonic phrase used to recover a wallet .  "You have the CPU and the secure element. The secure element is where you keep your crypto keys. Now, normally, the communications are e...