Russian hackers group ‘Snatch’ causes nuisance in Britain, targets Jeremy Clarkson, Sir David Attenborough

By Smith On Sep 27, 2022

Russian hackers have become a nuisance in Britain as several rich including Jeremy Clarkson and famous have been targeted. Ransoms were sought by these hackers in Bitcoin. After being contacted for ransom, those who refused had their details posted on the “dark web”. This has become a significant challenge for law enforcers.

The objective, prima facie, seems to be blackmail and nothing else. The hackers demand a ransom after they access the internal customer data of large organizations. The name of the online goons’ group is “Snatch”, along the lines of a Guy Ritchie film.

The details of Jeremy Clarkson, who presents Top Gear and Who Wants to Be a Millionaire?, were hacked and posted on the dark web. Along with Jeremy Clarkson, Sir David Attenborough’s details were also hacked, but not posted.

A farm shop called Daylesford Organic by this group in June 2021. Daylesford refused to pay a ransom in Bitcoins after Snatch stole 80 gigabytes of data. That data was uploaded to the dark web by the cyber goons. The hackers use deliberate force to hack into company networks and then steal the data.

How hackers pulled off the biggest ever cryptocurrency heist

Crypto Heist

Hackers pulled off the biggest ever cryptocurrency heist on Tuesday, stealing $613 million in digital coins from token-swapping platform Poly Network, only to return $260 million worth of tokens less than 24 hours later. Here’s what we know so far about the heist.

What is Poly Network?

A lesser-known name in the world of crypto, Poly Network is a decentralized finance (DeFi) platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains.

For example, a customer could use Poly Network to transfer tokens such as bitcoin from the Ethereum blockchain to the Binance Smart Chain, perhaps looking to access a specific application.

According to specialist crypto website Coindesk, Poly Network was launched by the founders of Chinese blockchain project Neo.

How did hackers steal the tokens?

Poly Network operates on the Binance Smart Chain, Ethereum and Polygon blockchains. Tokens are swapped between the blockchains using a smart contract which contains instructions on when to release the assets to the counterparties. One of the smart contracts that Poly Network uses to transfer tokens between blockchains maintains large amounts of liquidity to allow users to efficiently swap tokens. Poly Network tweeted on Tuesday that a preliminary investigation found the hackers exploited a vulnerability in this smart contract.

According to an analysis of the transactions tweeted by Kelvin Fichter, an Ethereum programmer, the hackers appeared to override the contract instructions for each of the three blockchains and diverted the funds to three wallet addresses. These were later traced and published by Poly Network.

The attackers stole funds in more than 12 different cryptocurrencies, including ether and a type of bitcoin, according to blockchain forensics company Chainalysis. A person claiming to have perpetrated the hack said they had spotted a “bug,” without specifying, and that they wanted to “expose the vulnerability” before others could exploit it.

Where did the money go?

As of late Wednesday, the hackers had returned $260 million of the assets, but $353 million was outstanding. It is unclear where the remaining assets have gone.

Coindesk reported on Tuesday that the hackers had tried to transfer assets including tether tokens from one of the three wallets into liquidity pool Curve.fi, but that transfer was rejected. About $100 million has been moved out of another of the wallets and deposited into liquidity pool Ellipsis Finance.

Who is the hacker?

The hacker or hackers has not yet been identified. Cryptocurrency security firm SlowMist said on its website that it has identified the attacker’s mailbox, internet protocol address, and device fingerprints, but the company has not yet named any individuals. SlowMist said the heist was “likely to be a long-planned, organized and prepared attack.”

Despite the purported hacker posing as a so-called “white hat”, an ethical hacker who aimed to identify the vulnerability for Poly Network and had “always” planned to give the money back, according to the messages published by Chainalysis, some crypto experts are skeptical.

Jeremy Clarkson’s ex-girlfriend Philippa Page says that Daylesford Organic was favorite shopping destination of the TV presenter. In December last year, Russian hackers attacked Gloucester City Council computer systems.

FAQs:

Name the most dangerous hacking groups on World Wide Web.
LulzSec. They had attacked Sony Pictures and the US Central Intelligence Agency.
Who are “Good Hackers”, and what do they do?
Vulnerabilities are found by “Good Hackers” on behalf of the client, who then offers suggestions on how to address them.

Disclaimer Statement: This content is authored by an external agency. The views expressed here are that of the respective authors/ entities and do not represent the views of Economic Times (ET). ET does not guarantee, vouch for or endorse any of its contents nor is responsible for them in any manner whatsoever. Please take all steps necessary to ascertain that any information and content provided is correct, updated, and verified. ET hereby disclaims any and all warranties, express or implied, relating to the report and any content therein.

For all the latest world News Click Here

Read original article here

Denial of responsibility! TechAI is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.