Digital wallet developer Electrum has released an emergency patch saying it found a vulnerability that could lead any website hosting Electrum to steal a user's digital currency, exposing passwords to the JOHNSONRPC interface and ingelling hackers full control of the wallet. Earlier, Electrum released the first patch, but it didn't seem to solve the problem, and they released a second update urgently Sunday night local time.
Bitcoin Future： is electrum making a wallet for ethereum
Digital Wallet Electrum was hacked, losing 250 bitcoins.
and open the web page, then your wallet may have been compromised. Particularly paranoid people may want to send all BTCs from their old Electrum wallets to the newly generated Electrum wallet.
According to the dimensionality reduction security laboratory (johnwick.io), hackers launched a denial of service (DoS) attack on the well-known wallet Electrum server. The hackers used a botnet of more than 140,000 computers to attack Electrum nodes and deployed malicious nodes at the same time . When users connect to these malicious nodes and use the old version of Electrum to send transactions
Slow Fog: Bitcoin Wallet Electrum updates the phishing theft that continues.
Slow Fog Alert: The world's leading bitcoin wallet Electrum updates the phishing theft continues.
Users of Bitcoin wallet Electrum are facing a phishing attack, according to the Dev Security Lab. Hackers broadcast messages to the Electrum client through a malicious server, prompting the user to update to v4.0.0, and if the user follows the prompt to install this "backdoor-carrying client", the private key is stolen and all digital assets are stolen. At the time of writing, at least 1,450 BTCs (stolen by one user, antimalware firm Malwarebytes and Electrum) had been stolen in phishing attacks that faked Thelectrum upgrade tips, with a total value of about $11.6 million. It is worth mentioning that less than version 3.3.4 of Electrum is vulnerable to such phishing attacks, users using electrum wallets are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released v4.0.0, please do not use the link in the prompt message to update to avoid loss of assets.
In December 2018, Slow Fog first discovered and alerted an attacker to a messaging flaw using the Electrum wallet client, forcing an "update prompt" to pop up during a user's currency transfer operation, inducing users to update and download malware to carry out a currency theft attack, according to Slow Fog. Although electrum officials said in early 2019 that some security mechanisms would be in place to prevent this "update phishing", many users of Electrum are still in the old version (less than 3.3.4) and the old version is still under threat. However, we do not rule out a similar threat to the new version.
"Electrum DDoS botnet infects more than 152,000 hosts" - Jett.
Blockchain.info, Electrum Wallet.
Note: Electrum-XZC is derived from Electrum and uses different seed phrase criteria, so it cannot be imported.
The main reason for the Trezor vulnerability is that it does not have built-in multi-signature functionality, so its multi-signature implementation is to support Electrum extension. This led to an attack on electrum, and Trezor was affected.
Cryptocurrencies are blockchain-based digital currencies, and cryptocurrencies wallets are used specifically to manage these assets. Crypto-digital currency wallets provide basic financial functions such as the creation of wallet addresses, crypto-digital currency transfers, and query of the transaction history of each wallet address. The wallet app creates 1 or more wallet addresses based on cryptography, each corresponding to a key pair: private and public keys.
DarkScandals Clearnet (accessible via standard browsers and URLs) and DarkScandals Darknet (not accessible via regular Internet browsing) are the two most popular ??? Cryptocurrencies: Bitcoin and Ethereum. Users are required to pay for cryptocurrency content that provides anonymity. However, law enforcement has been able to trace bitcoin and Ethereum payments back to 303 user accounts.
The Litecoin Foundation announced that it will move from electrum-LTC wallet to multi-purpose signature wallet BitGo.