News for hackers. Stuff that matters.

A comment on A fake job offer took down Axie Infinity. Parent comment

Re:A fake job offer took down Axie Infinity by sangnoir on Wednesday July 06, 2022 @05:24PM (#32007004)
It doesn't have to be the same pdf, it could have been an attachments from compromised machine via email/slack. "Hey, can you help me figure this unusual log/transaction summary". How many wouldn't open such an attachment from a "colleague"?
[ Parent | on HN ]
Re:A fake job offer took down Axie Infinity by emmelaich on Wednesday July 06, 2022 @07:43PM (#32008286)
Yep, internal security is brittle. The initial pdf vector would be only the start of a long sequence of hacks, including social engineering. e.g. sending email from managers -- or slack messages as you mention.
[ Parent | on HN ]
Re:A fake job offer took down Axie Infinity by DelightOne on Thursday July 07, 2022 @07:06AM (#32012481)
How do you defend against getting email from internal people, especially from people you expect email from?
[ Parent | on HN ]
Re:A fake job offer took down Axie Infinity by mavhc on Thursday July 07, 2022 @07:37AM (#32012684)
Don't keep your security keys capable of root access on anything that's not a hardware token locked in a safe.

Of course if you can access the software running the blockchain and get everyone to install an update, that works too

[ Parent | on HN ]
Re:A fake job offer took down Axie Infinity by JacobThreeThree on Wednesday July 13, 2022 @01:52PM (#32086290)
You can call your colleague on the phone to confirm they sent the email asking you to open an attachment.
[ Parent | on HN ]