BlockThreat - Week 22, 2020

Github, AT&T, ECDSA, DeFi

This week let’s take a breather from the usual survey of hacks, leaks, vulnerabilities and enjoy the much needed break with a number of interesting white papers. You will learn about the current state of privacy coins, ECDSA attacks, model consensus mechanism threats, and think about DeFi risk. For some lighter reading, you can enjoy the play by play of SIM swappers using AT&T as their playground to target cryptocurrency owners.

Hacks

• Hacker steals $1,200 worth of Ethereum in under 100 seconds - news of bots scanning Github and other Internet resources for wallet keys and mnemonics.

• The events of a SIM swap attack (and defense tips) - a play by play of a standoff between SIM swappers and an AT&T customer.

• The Ethereum forum hacker is now selling the databases of Trezor and Ledger - the same actor selling Ethereum.org DB from last week is offering additional dumps of popular hardware wallet companies. Both Ledger and Trezor question validity of the data.

Malware

• Thousands of enterprise syste…