News for hackers. Stuff that matters.

A comment on I just lost 1,400 BTC. Parent comment

Re:I just lost 1,400 BTC by eastbayjake on Monday August 31, 2020 @02:29PM (#24334462)
It was my understanding that the user had installed a version of the Electrum wallet that was not from the official source at electrum.org. (But agree - it was really difficult to identify the core issue from this string of GitHub comments.)
[ Parent | on HN ]
Re:I just lost 1,400 BTC by crtasm on Monday August 31, 2020 @04:37PM (#24335681)
They were running an old official version which has a serious issue allowing the full node servers it connects to to pop up a message. e.g. "You need to upgrade - click here" - that led to the malware.
[ Parent | on HN ]
Re:I just lost 1,400 BTC by nodesocket on Monday August 31, 2020 @09:26PM (#24337616)
And there is no way to track down the node server that popped up this malicious message? Take it offline?
[ Parent | on HN ]
Re:I just lost 1,400 BTC by fluffything on Tuesday September 01, 2020 @05:31AM (#24339948)
Yes, electrum.org maintains a blacklist. That won't stop a phisher that just made 16 million dollars though. Spawning a new server costs cents.
[ Parent | on HN ]