Bad actors have reportedly compromised the servers of a Bitcoin (BTC អ) ATM manufacturer, enabling them to redirect crypto assets to their own wallets.
នេះបើយោងតាមព័ត៌មានថ្មីមួយ របាយការណ៍ by BleepingComputer, crypto ATMs owned by General Bytes have been exploited by hackers who remotely created an admin user account for the company’s Crypto Application Server (CAS).
“The attacker was able to create an admin user remotely via CAS administrative interface via a URL call on the page that is used for the default installation on the server and creating the first administration user.
This vulnerability has been present in CAS software since version 20201208.”
General Bytes’ security advisory បាននិយាយថា the firm believes hackers first found a vulnerability within the CAS admin interface, then scanned the internet for specific servers that were exposed, including those hosted by the firm’s own cloud service.
The hackers were able to automatically forward Bitcoin to their wallets every time a customer sent coins to the ATMs, resulting in an undisclosed amount of crypto being stolen.
“The attacker accessed the CAS interface and renamed the default admin user to ‘gb.’
The attacker modified the crypto settings of two-way machines with his wallet settings and the ‘invalid payment address’ setting.
Two-way ATMs started to forward coins to the attacker’s wallet when customers sent coins to ATM.”
According to the advisory, General Bytes is releasing updates to correct the problem but is warning customers not to use the ATMs until the vulnerabilities are fixed.
កុំនឹក Beat - ជាវប្រចាំ ដើម្បីទទួលបានការដាស់តឿនអ៊ីមែលតាមអ៊ីមែលដែលផ្ញើដោយផ្ទាល់ទៅប្រអប់ទទួលរបស់អ្នក
ពិនិត្យ សកម្មភាពតម្លៃ
តាមយើងនៅលើ Twitter, Facebook និង Telegram
surf ឌឹដហូមលាយប្រចាំថ្ងៃ
ការបដិសេធ: មតិដែលបានសម្តែងនៅឌឹដហូមដស៍មិនមែនជាដំបូន្មានវិនិយោគទេ។ វិនិយោគិនគួរតែប្រឹងប្រែងដោយយកចិត្តទុកដាក់មុនពេលធ្វើការវិនិយោគដែលមានហានិភ័យខ្ពស់នៅក្នុង Bitcoin, cryptocurrency ឬទ្រព្យសម្បត្តិឌីជីថល។ សូមណែនាំថាការផ្ទេរនិងការធ្វើពាណិជ្ជកម្មរបស់អ្នកគឺជាហានិភ័យផ្ទាល់របស់អ្នកហើយការបាត់បង់ណាមួយដែលអ្នកអាចទទួលរងគឺជាទំនួលខុសត្រូវរបស់អ្នក។ Daily Hodl មិនបានផ្តល់អនុសាសន៍ឱ្យទិញឬលក់រូបិយប័ណ្ណគ្រីបថលឬទ្រព្យសម្បត្តិឌីជីថលទេហើយក៏មិនមែនជាអ្នកផ្តល់ប្រឹក្សាផ្នែកវិនិយោគផងដែរ។ សូមកត់សម្គាល់ថាឌឹដេវហូដចូលរួមក្នុងទីផ្សារសម្ព័ន្ធ។
Featured Image: Shutterstock/Alexander Geiger
Source: https://dailyhodl.com/2022/08/22/bitcoin-atm-company-targeted-by-hackers-exploiting-zero-day-bug-report/