x
Black Bar Banner 1
x

New: AI Blog Autopilot — free for the next 30 days. Switch it on by November 15th »

NEW: Smart Mail is live — free for every member. Send broadcasts, build lists and run autoresponders. Open Smart Mail »

Training: Lesson 14 in Getting Started with MarketHive. Watch it now »

  • Sign Up
  • Log In
  • Calendar
A+ A−
Ads by Markethive - View All
The Blog Feed
The Blog Feed
» Blog Feed
Write a New Blog Post
Search Blog Status
Most Viewed
Most Recent
Most Shared
Alphabetical
Markethive Blog (default)
My Blog Posts
Friends' Blogs
Blog Categories
All
Advertising
Blockchain & Cryptocurrency
Business Development
Diet & Weight Loss
Environmental
Health and Wellness
History and Culture
Home and Garden
Marketing
Mentoring & Training
Money & Finance
Other
Political
Prayer & Religion
Programming & Technical
Real Estate
Search Engine Optimization
Social Media
Spirituality
Sports & Recreation
Transport
Travel & Events
Website Design
Blogging Tools & Assets
My Blog Info
Members Subscribed to You
Blogs You Are Subscribed To
Website Widget
Wordpress Plugin
Subscribe for Greater Services
Subscribe to one of many subscriptions, each one includes the previous ones.. Unlock powerful tools, advance features, to build a powerful reach.

Bitcoin Wallet App Caught Stealing Seed Keys

Posted by David Ogden on May 10, 2018 - 5:27am


Bitcoin Wallet App Caught Stealing Seed Keys

Bitcoin Wallet App Caught Stealing Seed Keys

The team behind Electrum, a Bitcoin wallet app, has exposed a copycat product named Electrum Pro as a malicious app that steals users' seed keys.

Electrum developers made their accusations in a document published on GitHub yesterday.

The document contains a step-by-step guide to decompiling a rival product named Electrum Pro that popped up online two months ago in March.


 

Obvious copycat is obviously malicious

The Electrum team has long suspected this is a scam product. The reasons are that the newly launched wallet app used their brand name without permission, but also registered the electrum.com domain, similar to the real Electrum domain of electrum.org, in an attempt to capitalize on the older app's reputation and trick users into using their product.

Now, Electrum devs seem to have confirmed their initial suspicions. On GitHub, the Electrum team points to a particular piece of code (lines 223-248 in electrumpro_keystore.py) where the Electrum Pro wallet appears to take the user's wallet seed key and upload it to the electrum.com domain.

Wallet seed keys are cryptographic keys that allow the owners of a wallet app to access the funds of multiple Bitcoin addresses stored in a particular wallet.

With the seed keys uploaded to electrum.com, the owners of those domains have the ability to use these seed keys and empty Bitcoin accounts

According to Electrum devs, creating or restoring a wallet with Electrum Pro will send copies of the users' wallet seed keys to the electrum.com domain.

Seed key theft seen in Windows and macOS binaries

"We previously warned users against 'Electrum Pro', but we did not have formal evidence at that time," Electrum devs said.

Devs also said they've only analyzed Electrum Pro's "electrumpro-4.0.2.dmg" macOS binary and "ElectrumPro-4.0.2-Standalone.zip" Windows binary, but warned that "is safe to assume that the other Windows binaries are malicious as well."

Affected users should move funds from Bitcoin addresses they've managed via Electrum Pro. At the time of writing, there have not been any reports of stolen funds.


 

Author By Catalin Cimpanu May 10, 2018 12:30 AM
 

Posted by David Ogden Entrepreneur

© Markethive Inc.