Connect with us

Hi, what are you looking for?

Economy

Singapore Authorities Raise Concerns Around Crypto Draining Kits

Singapore police authority and the Cyber Security Agency of Singapore have raised concerns around cryptocurrency draining kits.

In a joint statement, the authorities warned that cybercriminals are increasingly leveraging cryptocurrency drainers and targeting owners of digital wallets.

(1/2) As the use of cryptocurrencies become increasingly popular, cybercriminals are also increasingly leveraging crypto drainers to target owners of cryptocurrency wallets.

— CSA (@CSAsingapore) January 31, 2024

What is a Crypto Drainer?


A crypto drainer is a type of malware targeting digital wallets and works by exploiting any vulnerability. For example, when you send cryptocurrency from one wallet to another, you need to sign the transaction with your private key.

The private key is like a password that allows you to authorise transactions from your wallet. Drainers are often deployed as a phishing attack when the user is tricked into clicking a malicious link.

Although the Singaporean authorities are raising concerns, they add, “While such cases have not been observed in Singapore, members of the public should remain alert to such cyber attacks that are happening globally.”

The authorities warn of other scams which include unsuspecting victims connecting their crypto wallets to a website and then asked to authenticate their accounts using private keys and seed phrases.

Once a connection is made cybercriminals begin infiltrating cryptocurrencies out of the victim’s wallets. Another popular scam includes airdrops – the distribution of free tokens.

Drainers and Recent Hacks


In December, cryptocurrency hacking group, Pink Drainer was linked to the recent $4.4 million LINK user drain, increasing the number of their victims to 9,068 with a total of $18.7 million stolen.

Cybercrime, including impersonations, hackings and crypto-jacking in the cryptocurrency sector are common. Just last month, the US Securities and Exchange Commission (SEC) social media account, X was compromised when it posted the fake spot Bitcoin ETF approval announcement.

Here are the most common risks in the cryptocurrency sector.

Phishing Attacks: This is when users can be tricked into revealing their private keys or login credentials through phishing emails or websites. This involves the practice of sending fraudulent communication.

Hacks and Cryptocurrency Exchanges: Cryptocurrency exchanges are often targeted for large-scale thefts. If an exchange is compromised, users’ funds can be at risk.

Third-party Applications and Software: Third-party applications are any applications that aren’t created or supported by the maker of the device the app is installed on. Hackers may find new ways to exploit bugs in third-party software to retrieve sensitive information.

Wallet Vulnerabilities: Malicious actors can exploit vulnerabilities in cryptocurrency wallets to steal funds.

Smart Contract Flaws: Vulnerabilities in smart contracts can be exploited to drain funds from decentralized applications (dApps) or blockchains.

Ponzi Schemes: Fraudulent schemes promising high returns can deceive users into investing their cryptocurrencies, resulting in significant losses.

Social Engineering: Manipulating individuals to disclose sensitive information or transfer funds through social engineering tactics is another risk. Social engineering isn’t a direct cyber-attack. It is when actors with bad intentions gain the trust of their targets, so they lower their guard and give up sensitive information.

Insider Threats: Employees or individuals with insider access to sensitive information can misuse their privileges to steal funds or sensitive information.

Mitigating Cybersecurity Risks: To mitigate these risks, users and organizations should adopt best practices, such as using hardware wallets, keeping software up-to-date, and conducting thorough due diligence before investing or participating in cryptocurrency transactions.

Setting up 2FA is an important first step for security because it immediately neutralizes the risks associated with compromised passwords.

 

The post Singapore Authorities Raise Concerns Around Crypto Draining Kits appeared first on Cryptonews.

Your information is secure and your privacy is protected. By opting in you agree to receive emails from us. Remember that you can opt-out any time, we hate spam too!

Latest

Economy

With Bitcoin’s (BTC) price quickly re-approaching its all-time high, almost all holders of the digital currency are back in the black. Blockchain market intelligence...

Economy

Circle, USDC’s issuer, has struck a partnership deal with Coincheck, one of Japan’s biggest crypto exchanges – with a view to securing the stablecoin’s...

Economy

In wake of the Pepe Coin (PEPE)’s 40% price pump on Tuesday, profit-taking Pepe holders are shifting funds to a new crypto token for...

News

President Biden said Israel has agreed to a cease-fire in the Gaza Strip during the Islamic holy month of Ramadan, but Hamas is not...

News

Sen. Josh Hawley, R-Mo., is urging global consulting firm McKinsey & Company to hand over ‘comprehensive documentation’ showcasing its past or present contracts with the...

News

House Foreign Affairs Committee Chairman Michael McCaul, R-Texas, is threatening to hold Secretary of State Antony Blinken in contempt of Congress, accusing him of...

You May Also Like

Financial Advisors

[#item_full_content]

Financial Advisors

[#item_full_content]

Financial Advisors

The humongous outbreak of the dreaded coronavirus has brought about a groundbreaking change in what the world perceived as ‘normal’. With an estimated 280,391,189...

Disclaimer: Respect Investment.com, its managers, its employees, and assigns (collectively "The Company") do not make any guarantee or warranty about what is advertised above. Information provided by this website is for research purposes only and should not be considered as personalized financial advice. The Company is not affiliated with, nor does it receive compensation from, any specific security. The Company is not registered or licensed by any governing body in any jurisdiction to give investing advice or provide investment recommendation. Any investments recommended here should be taken into consideration only after consulting with your investment advisor and after reviewing the prospectus or financial statements of the company.

Copyright © 2024 Respect Investment. All Rights Reserved.