Hackers claim to steal user data from the platform for KYC inspections from top exchanges such as Bittrex, Poloniex, Bitfinex, and Coin.
In a dark market called “Dread”, a vendor called “ExploitDOT” is selling user data collected by most jurisdictions for digital currency exchanges.
According to information obtained by CCN, the hacker has been posting similar advertisements on the site since July 2018. He claimed in the advertisement that he stole the platform for KYC inspection from top exchanges such as Bittrex, Poloniex, Bitfinex and Coin. User profile, which also includes ID card and driver’s license.
The data appears to be sold at $10 or more per 100 documents, with discounts for multiple purchases and up to 25,000 for up to $1 per 1000 documents.
A network security expert who asked not to be named contacted CCN. After impersonating the buyer and communicating with the hacker, he obtained three free samples as legal evidence of the leaked document.
The expert received photos of individuals holding a paper with the words “Binance” and the date of the shoot, in which the user’s face, ID card and driver’s license are clearly visible.
CCN can also access these seemingly legitimate images. Despite the small sample, hackers who sold the file said they had user profiles from countries covered by all digital currency exchanges.
According to the security expert, he also communicated with the currency security via email, but could not confirm its authenticity. After the exchange, the company found that there was still a certain gap between the data received by the platform and the “sample provided by the hacker”.
Subsequently, the Chanan spokesman further pointed out that they had “the results of the investigation on how to obtain such information” and explained in detail the traces of unauthorized access to their systems. CCN has now contacted the currency security, but has not yet received a response.
The security of the platform is widely recognized in the industry for its security. Recently, the company thwarted the plan of Cryptopia hackers by freezing the stolen digital currency. Last year, Coin Security also organized a surge in Syscoin (SYS) attacks on its platform.
Recently, 87GB of data in the Collection #1 database has been leaked, including more than 700 million email addresses and 21 million passwords. It is not yet clear whether it is related to this matter.
