CoinsPaid

Read

Scammers have stolen $2 million worth of cryptocurrency assets from a customer of the crypto exchange OKX.
According to WuBlock, the attackers “purchased” the identity information of Lai Japanese Fang Chang. The information was allegedly leaked in a Telegram <a href="https://www.bleepingcomputer.com/news/security/361-million-stolen-accounts-leaked-on-telegram-added-to-hibp/" target="_blank" rel="noopener noreferrer nofollow">data breach</a>.
Using these sensitive details, the scammers accessed Chang’s OKX account. They then proceeded to take the account under their control using the “forgotten password” option.
By assuming Chang’s identity, the bad actors proceeded to change all his security settings, even going so far as to employ a deepfake video of the victim that managed to alter his email ID, phone number, and even his Google authenticator settings.
Within 24 hours following the user being alerted of the change, his account lost over $2 million worth of various crypto assets.
According to Wu, OKX has responded by acknowledging that the user’s account has been stolen. The platform is currently helping the victim recover his account.&nbsp;
Reportedly, the firm has also taken legal action against the attackers.
Amidst this backdrop, an X user recalled an earlier attack on an OKX&nbsp; wallet, with the victim losing 50,000 Trc-20 USDT.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 前不久，我的一位朋友在使用OKX钱包时遭遇页面劫持被盗5万USDT（波场TRC20）。 据我这位朋友找的安全从业人士分析，黑客是通过页面劫持将他用的OKX钱包的“补充GAS”替换成“更新波场账户所有者权限”，在用户界面无感知的情况下骗取授权，进而控制受害者的波场账户实现盗币。… <a href="https://t.co/kXauBBBd0T" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/kXauBBBd0T</a>— NingNing (🌿,👻) (@0xNing0x) <a href="https://twitter.com/0xNing0x/status/1797802006767374556?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">June 4, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
These attacks were preceded by a <a href="https://crypto.news/okx-dex-suffers-exploit-resulting-in-over-430k-loss/" rel="noopener noreferrer nofollow">$430,000 exploit on OKX Dex</a>. Back then, security firm SlowMist had reported that the OKX DEX proxy admin owner’s private key had allegedly leaked.
You might also like: <a href="https://crypto.news/google-asleep-at-the-wheel-on-crypto-deepfake-scams/" rel="noopener noreferrer nofollow"> Analysts: Google ‘asleep at the wheel’ on crypto deepfake scams </a>
The leak resulted in hackers gaining control of the protocol and allowed them to alter it with malicious functions. This allowed them to steal funds from users who had given the protocol permission to interact with their wallets.
OKX had to revoke contract permissions to prevent further damage.
Centralized cryptocurrency exchanges have been a common target for attackers.&nbsp;
Last week, Japanese crypto exchange <a href="https://crypto.news/japans-dmmbitcoin-to-match-outflows-after-308m-hack/" rel="noopener noreferrer nofollow">DMM Bitcoin was hacked</a> for $305 million. Prior to that, Estonia-based crypto exchange <a href="https://crypto.news/coinspaid-gets-hacked-again-7-million-goes-missing/" rel="noopener noreferrer nofollow">CoinsPaid was hacked</a> for over $7 million.
With the onset of AI-powered tools, hackers now have a powerful weapon in their arsenal. Deepfake videos are being employed to dupe market participants.
As such, there have been <a href="https://crypto.news/google-asleep-at-the-wheel-on-crypto-deepfake-scams/" rel="noopener noreferrer nofollow">industry-wide concerns</a> over the ethical implications of AI use.&nbsp;
Read more: <a href="https://crypto.news/okx-jumpstart-unveils-btc-staking-option-for-mining-runecoin/" rel="noopener noreferrer nofollow"> OKX Jumpstart unveils BTC staking option for mining Runecoin </a>

Sophisticated deepfake AI hack nets over $2m in stolen funds from OKX user

crypto.news

Other articles published on Jun 4, 2024

Potential Negative Consequences of Bitcoin and Ethereum Spot ETFs

Dogeverse and ChainGpt Investors Hail MoonBag as the Top Meme Coin Presale in 2024

Hong Kong Shuts Out Unlicensed Crypto Exchanges As Deadline Expires

Hidden Gems: Cryptos That Could Make You a Millionaire

Just In: FTX Proposes $200M Payment to IRS, Seeks Reduction from $24B

Core Scientific signs a $3.5 billion deal with CoreWeave to expand into AI and HPC

Join our free newsletter for daily crypto updates!