×
Bitcoin

PayPal Now Lets All US Users Buy, Sell and Hold Cryptocurrency (engadget.com) 41

It was teased last month, and now it's official: PayPal is bringing its newly-announced support for cryptocurrency to all US accounts. Engadget reports: PayPal says all eligible users can start buying, selling and holding bitcoin, litecoin, ethereum and bitcoin cash. Beginning next year, PayPal also plans to bring cryptocurrency into Venmo and will allow users to pay merchants with their cryptocurrency holdings (the digital currency will be converted to fiat currency). The company hasn't detailed its plans to make cryptocurrency trading available in other countries, but says it will come to "select international markets in the first half of 2021."
Crime

Microsoft Engineer Gets Nine Years For Stealing $10 Million From Microsoft (arstechnica.com) 41

A former Microsoft software engineer from Ukraine has been sentenced to nine years in prison for stealing more than $10 million in store credit from Microsoft's online store. Ars Technica reports: From 2016 to 2018, Volodymyr Kvashuk worked for Microsoft as a tester, placing mock online orders to make sure everything was working smoothly. The software automatically prevented shipment of physical products to testers like Kvashuk. But in a crucial oversight, it didn't block the purchase of virtual gift cards. So the 26-year-old Kvashuk discovered that he could use his test account to buy real store credit and then use the credit to buy real products.

At first, Kvashuk bought an Office subscription and a couple of graphics cards. But when no one objected to those small purchases, he grew much bolder. In late 2017 and early 2018, he stole millions of dollars worth of Microsoft store credit and resold it online for bitcoin, which he then cashed out using Coinbase. US prosecutors say he netted at least $2.8 million, which he used to buy a $160,000 Tesla and a $1.6 million waterfront home (his proceeds were less than the value of the stolen credit because he had to sell at a steep discount).

Kvashuk made little effort to cover his tracks for his earliest purchases. But as his thefts got bigger, he took more precautions. He used test accounts that had been created by colleagues for later thefts. This was easy to do because the testers kept track of test account credentials in a shared online document. He used throwaway email addresses and began using a virtual private networking service. Before cashing out the bitcoins, he sent them to a mixing service in an attempt to hide their origins. Kvashuk reported the bitcoin windfall to the IRS but claimed the bitcoins had been a gift from his father.

Bitcoin

Silk Road Bitcoins Worth $1 Billion Change Hands After Seven Years (theguardian.com) 73

A billion dollars worth of bitcoins linked to the shuttered darknet market Silk Road has changed hands for the first time in seven years, prompting renewed speculation about the fate of the illicit fortune. The Guardian reports: Almost 70,000 bitcoins stored in the account which, like all bitcoin wallets, is visible to the public, had lain untouched since April 2013. The website was shut down by an FBI raid six months after they were deposited, and they have not moved since. Late on Tuesday night, however, the full amount less a $12 transaction fee was transferred to a new bitcoin address, records show.

"Through blockchain analysis we can determine that these funds likely originated from the Silk Road," said Tom Robinson, chief scientist at the cryptocurrency analysts Elliptic. "They left the Silk Road's wallet back on 6 May 2012 when they were worth around $350,000 and then remained dormant for nearly a year, before being moved ... in April 2013." From there, the funds have lain dormant. After the marketplace was shut down in late 2013, its founder and boss, 36-year-old San Franciscan Ross Ulbricht, was sentenced to a double life sentence plus 40 years without possibility of parole. The FBI managed to seize 174,000 bitcoins, then worth about $100m, but an estimated 450,000 earned by the marketplace remain unaccounted for.

Robinson says it is unclear who moved the money. "The movement of these bitcoins today, now worth around $955 million, may represent Ulbricht or a Silk Road vendor moving their funds," he said. "However, it seems unlikely that Ulbricht would be able to conduct a bitcoin transaction from prison." One possibility is that an individual or group has managed to "crack" the wallet, effectively guessing its password and stealing the funds. A file that some claimed was an encrypted bitcoin wallet containing the keys to the funds has been circulated in cryptocurrency communities for the past year, and -- if it is what it was claimed to be -- then a combination of brute computing power and good luck could have successfully decrypted the wallet.

The Almighty Buck

A Few Trick-or-Treaters in Canada Receive a Surprising Treat: Bitcoin (cointelegraph.com) 37

Cointelegraph reports: While many children dressed as ghosts, goblins, and witches last night may have been disappointed to find an inedible thin piece of cardboard left out in a goodie bag, a lucky few recognized the treat as a Bitcoin prize.

According to an October 31 tweet from Brad Mills, the crypto user filled a Halloween candy box with more than just chocolates and sweets — he also added $200 in Bitcoin (BTC) cards. Mills posted a video of him adding the two gift cards, each worth roughly 0.007 BTC following the coin's rise to $14,000, and filmed the reactions of trick or treaters in his Canadian neighborhood.

One boy in a white costume was the first to meticulously dig through the box before saying to his group of friends, "I just got a $100 Bitcoin gift card!"

Crime

Therapy Patients Blackmailed For Cash After Clinic Data Breach (bbc.co.uk) 55

"Many patients of a large psychotherapy clinic in Finland have been contacted individually by a blackmailer, after their data was stolen," reports the BBC: The data appears to have included personal identification records and notes about what was discussed in therapy sessions.

Vastaamo is a nationwide practice with about 20 branches and thousands of patients. The clinic has advised those affected to contact the police. It said it believed the data had been stolen in November 2018, with a further potential breach in March 2019... About 300 records have already been published on the dark web, according to the Associated Press news agency.

On its website, the clinic calls the attack "a great crisis". It has set up a helpline and is offering all victims one free therapy session, the details of which will not be recorded.

According to the article, the blackmailer claims Vastaamo refused to pay the 40 bitcoin ransom — so they are instead blackmailing individual patients.

And one patient even complained that while his therapist took notes in a physical notebook, "he had not been told these would be uploaded to a server."
Bitcoin

PayPal To Let You Buy and Sell Cryptocurrencies in the US (techcrunch.com) 27

PayPal has partnered with cryptocurrency company Paxos to launch a new service. PayPal users in the U.S. will soon be able to buy, hold and sell cryptocurrencies. More countries are coming soon. From a report: PayPal plans to support Bitcoin, Ethereum, Bitcoin Cash and Litecoin at first. You'll be able to connect to your PayPal account to buy and sell cryptocurrencies. Behind the scenes, Paxos takes care of trading and custody. In early 2021, PayPal wants to let you use your crypto assets as a funding source for your PayPal purchases. This could be a good way to use cryptocurrencies for everyday purchases without having to convert cryptocurrencies on an exchange first. There are 26 million merchants that offer PayPal around the world. For those merchants, customers paying in crypto won't have any impact. Everything will be converted to fiat currency when a transaction is settled. As part of today's move, PayPal has been granted a conditional BitLicense by the New York State Department of Financial Service. It should be able to launch its crypto service in partnership with Paxos in New York.
Security

Mysterious Hackers Donating Stolen Money (bbc.com) 49

A hacking group is donating stolen money to charity in what is seen as a mysterious first for cyber-crime that's puzzling experts. smooth wombat writes: Darkside hackers claim to have extorted millions of dollars from companies, but say they now want to "make the world a better place." In a post on the dark web, the gang posted receipts for $10,000 in Bitcoin donations to two charities. One of them, Children International, says it will not be keeping the money. The move is being seen as a strange and troubling development, both morally and legally. In the blog post on 13 October, the hackers claim they only target large profitable companies with their ransomware attacks. The attacks hold organisations' IT systems hostage until a ransom is paid. They wrote: "We think that it's fair that some of the money the companies have paid will go to charity. No matter how bad you think our work is, we are pleased to know that we helped changed someone's life. Today we sended (sic) the first donations." The cyber-criminals posted the donation along with tax receipts they received in exchange for the 0.88 Bitcoin they had sent to two charities, The Water Project and Children International.
Bitcoin

Owners of BitMEX, a Leading Bitcoin Exchange, Face Criminal Charges (nytimes.com) 24

An anonymous reader quotes a report from The New York Times: American authorities brought criminal charges on Thursday against the owners of one of the world's biggest cryptocurrency trading exchanges, BitMEX, accusing them of allowing the Hong Kong-based company to launder money and engage in other illegal transactions. Federal prosecutors in Manhattan indicted the chief executive of BitMEX, Arthur Hayes, and three co-owners: Benjamin Delo, Samuel Reed and Gregory Dwyer. Mr. Dwyer was arrested in Massachusetts on Thursday, while the other three men remained at large, authorities said.

Prosecutors said BitMEX had taken few steps to limit customers even after being informed that the exchange was being used by hackers to launder stolen money, and by people in countries under sanctions, like Iran. "BitMEX made itself available as a vehicle for money laundering and sanctions violations," the indictment released on Thursday said. BitMEX has handled more than $1.5 billion of trades each day recently, making it one of the five biggest exchanges on most days. BitMEX and Mr. Hayes have been known for pushing the limits in the unregulated cryptocurrency industry.

After it was founded in 2014, BitMEX grew popular by allowing traders to buy and sell contracts tied to the value of Bitcoin -- known as derivatives, or futures -- with few of the restrictions and rules that were in place in other exchanges. That allowed investors to take out enormous loans and make risky trades. The relaxed attitude also made it possible for people all over the world to easily move money in and out of BitMEX without the basic identity checks that can prevent money laundering. In August, BitMEX put in place some of those verification checks.

Government

America's IRS Wants Cryptocurrency Exchanges Declared on Tax Forms (morningstar.com) 100

America's dreaded tax-collecting agency is sending "a strong warning to millions of crypto holders who aren't complying with the law that they must file required forms," reports the Wall Street Journal. The front page of this year's tax forms — just below "Name" and "Address" — will ask filers to declare whether they've received or exchanged any virtual currencies.

The Journal calls it "setting a trap for cryptocurrency tax cheats." "This placement is unprecedented and will make it easier for the IRS to win cases against taxpayers who check 'No' when they should check 'Yes, '" says Ed Zollars, a CPA with Kaplan Financial Education who updates tax professionals on legal developments... The change to the crypto question and other recent actions show the IRS is taking cryptocurrencies seriously as a threat to the tax system, whether the noncompliance is by enthusiasts who owe little or by sophisticated international criminals. In two recent nontax criminal cases — one involving theft by North Korea and the other involving the sale of child pornography by a Dutch national — the IRS has provided key assistance because of its growing expertise in cryptocurrencies....

For their part, many crypto users are angry with the IRS's guidance, which treats bitcoin, ether and their kin as property rather than currency. So if a crypto holder uses it to buy something or exchanges one cryptocurrency for another, there's usually a capital gain or loss to report on the tax return. "Buying a sandwich with cryptocurrency shouldn't be a taxable event," says Sean Cover, a New York City cryptocurrency holder who works in finance for a nonprofit group. He says that in 2017 he had more than 500 transactions on several platforms, and it took him 10 hours to prepare his crypto tax forms even though he paid for special software. Like some members of Congress, Mr. Cover supports a $200 threshold before crypto transactions would need to be reported. The IRS says it's up to Congress to change the law....

Meanwhile, the IRS is forging ahead with other crypto compliance measures. Earlier this month, it offered rewards up to $625,000 to code-breakers who can crack so-called privacy coins like Monero that attract illicit activity because they claim to be untraceable... The IRS is also sending a new round of letters to crypto holders who may not have complied with the tax rules, expanding on last year's mailing of about 10,000 letters. Tax specialists say the recipients are often customers of Coinbase, which was ordered by a federal court to turn over information on some accounts to the IRS.

EU

EU To Launch Blockchain Regulatory Sandbox by 2022 (decrypt.co) 9

The European Commission will team up with the European Blockchain Partnership (EBP) to launch a new regulatory sandbox focused on cryptocurrencies and blockchain by 2022, according to an announcement published today. From a report: The commission is the executive branch of the European Union and the initiative is part of its newly adopted Digital Finance Package that aims to provide greater clarity for cryptocurrency companies. "By making rules safer and more digital friendly for consumers, the Commission aims to boost responsible innovation in the EU's financial sector, especially for highly innovative digital start-ups, while mitigating any potential risks related to investor protection, money laundering and cyber-crime," the commission stated. According to the commission, some digital assets already fall under EU legislation, however, these rules "most often predate the emergence of crypto-assets and DLT." This could result in various roadblocks on the way of innovations and make it difficult to apply existing frameworks to blockchain and cryptocurrencies in the financial sector.
Bitcoin

Swiss Region To Take Cryptocurrency For Tax Payments In 2021 (go.com) 22

A Swiss region that has billed itself as a hub for high-tech finance said Thursday that it plans to accept cryptocurrencies Bitcoin and Ether for tax payments starting next year. ABC News reports: Switzerland's Zug canton joins its eponymous main city and several Swiss towns in agreeing to take tax payments in cryptocurrency. Zug is thought to be the first region in the rich Alpine country to make the decision. The canton, which bills itself as home to "Crypto Valley," said it would accept taxes from companies or individuals of up to 100,000 Swiss francs (about $110,000) paid in Bitcoin or Ether as of February. A pilot program is expected to be launched in the coming weeks. Taxpayers who want to pay in cryptocurrency would notify tax authorities, who in return would send a digitized QR code that allows for such payments.
Twitter

Twitter Hack May Have Had Another Mastermind: A 16-Year-Old (nytimes.com) 34

When authorities arrested Graham Ivan Clark, who they said was the "mastermind" of the recent Twitter hack that ensnared Kanye West, Bill Gates and others, one detail that stood out was his age: He was only 17. Now authorities have homed in on another person who appears to have played an equal, if not more significant role, in the July 15 attack, New York Times reported Tuesday, citing four people involved in the investigation who declined to be identified because the inquiry was ongoing. They said the person was at least partly responsible for planning the breach and carrying out some of its most sensitive and complicated elements.His age? Just 16, public records show. From the report: On Tuesday, federal agents served the teenager with a search warrant and scoured the Massachusetts home where he lives with his parents, said one of the people involved in the operation. A spokesman for the FBI confirmed a search warrant had been executed at the address. The search warrant and other documents in the case are under seal and federal agents may decide not to charge the youth with a crime. If he is ultimately arrested, the case is likely to be handed over to Massachusetts authorities, who have more leverage than federal prosecutors in charging minors as adults. (The New York Times is not naming the teenager at this point because of his age and because he has not been charged.)
Bitcoin

Is Blockchain 'the Amazing Solution for Almost Nothing'? (thecorrespondent.com) 155

Long-time Slashdot reader leathered shares an investigation from the Correspondent about blockchain -- and " what's so terribly revolutionary about it? What problem does it solve...? I can tell you upfront, it's a bizarre journey to nowhere. I've never seen so much incomprehensible jargon to describe so little... And I've never seen so many people searching so hard for a problem to go with their solution...." [Y]ou can't do much with bitcoin. But blockchain, on the other hand: it's the technology behind bitcoin, which makes it cool. Blockchain generalises the bitcoin pitch: let's not just get rid of banks, but also the land registry, voting machines, insurance companies, Facebook, Uber, Amazon, the Lung Foundation, the porn industry and government and businesses in general. They are superfluous, thanks to the blockchain. Power to the users...!

The only thing is that there's a huge gap between promise and reality. It seems that blockchain sounds best in a PowerPoint slide. Most blockchain projects don't make it past a press release, an inventory by Bloomberg showed... Out of over 86,000 blockchain projects that had been launched, 92% had been abandoned by the end of 2017, according to consultancy firm Deloitte. Why are they deciding to stop? Enlightened — and thus former — blockchain developer Mark van Cuijk explained: "You could also use a forklift to put a six-pack of beer on your kitchen counter. But it's just not very efficient...."

[I]nformation and communications technology is like the rest of the world — a big old mess. And that's something that we — outsiders, laypeople, non-tech geeks — simply refuse to accept. Councillors and managers think that problems — however large and fundamental they are — evaporate instantaneously thanks to technology they've heard about in a fancy PowerPoint presentation. How will it work? Who cares! Don't try to understand it, just reap the benefits!

This is the market for magic, and that market is big. Whether it's about blockchain, big data, cloud computing, AI or other buzzwords...

Maybe this is blockchain's greatest merit: it's an awareness campaign, albeit an expensive one. "Back-office management" isn't an item on the agenda in board meetings, but "blockchain" and "innovation" are... Yes, it took a few wild, unmet promises, but the result is that administrators are now interested in the boring subjects that help make the world run a bit more efficiently — nothing spectacular, just a bit better.

Twitter

The Attack That Broke Twitter Is Hitting Dozens of Companies (wired.com) 32

An anonymous reader quotes a report from Wired: Phone spear phishing" attacks have been on the rise since a bitcoin scam took over the social media platform in July. When law enforcement arrested three alleged young hackers in the US and the UK last month, the story of the worst-known hack of Twitter's systems seemed to have drawn to a tidy close. But in fact, the technique that allowed hackers to take control of the accounts of Joe Biden, Jeff Bezos, Elon Musk, and dozens of others is still in use against a broad array of victims, in a series of attacks that began well before Twitter's blowup, and in recent weeks has escalated into a full-blown crime wave.

But Twitter is hardly the only recent target of "phone spear phishing," also sometimes known as "vishing," for "voice phishing," a form of social engineering. In just the past month since the Twitter hack unfolded, dozens of companies -- including banks, cryptocurrency exchanges, and web hosting firms -- have been targeted with the same hacking playbook, according to three investigators in a cybersecurity industry group that's been working with victims and law enforcement to track the attacks. As in the Twitter hack, employees of those targets have received phone calls from hackers posing as IT staff to trick them into giving up their passwords to internal tools. Then the attackers have sold that access to others who have typically used it to target high-net-worth users of the company's services -- most often aiming to steal large amounts of cryptocurrency, but also sometimes targeting non-crypto accounts on traditional financial services.
"Simultaneous with the Twitter hack and in the days that followed, we saw this big increase in this type of phishing, fanning out and targeting a bunch of different industries," says Allison Nixon, who serves as chief research officer at cybersecurity firm Unit 221b and assisted the FBI in its investigation into the Twitter hack. "I've seen some unsettling stuff in the past couple of weeks, companies getting broken into that you wouldn't think are soft targets. And it's happening repeatedly, like the companies can't keep them out."

While the perpetrators don't appear to be state-sponsored hackers or foreign cybercrime organizations, it may be only a matter of time until they're adopted by these foreign groups who contract out the phone calls to English-speaking phone phishers.
Bitcoin

The Quest To Liberate $300,000 of Bitcoin From an Old ZIP File (arstechnica.com) 38

A few quintillion possible decryption keys stand between a man and his cryptocurrency. From a report: In October, Michael Stay got a weird message on LinkedIn. A total stranger had lost access to his bitcoin private keys -- and wanted Stay's help getting his $300,000 back. It wasn't a total surprise that The Guy, as Stay calls him, had found the former Google security engineer. Nineteen years ago, Stay published a paper detailing a technique for breaking into encrypted zip files. The Guy had bought around $10,000 worth of bitcoin in January 2016, well before the boom. He had encrypted the private keys in a zip file and had forgotten the password. He was hoping Stay could help him break in. In a talk at the Defcon security conference this week, Stay details the epic attempt that ensued.

[...] "If we find the password successfully, I will thank you," The Guy wrote with a smiley face. After an initial analysis, Stay estimated that he would need to charge $100,000 to break into the file. The Guy took the deal. After all, he'd still be turning quite the profit. "It's the most fun I've had in ages. Every morning I was excited to get to work and wrestle with the problem," says Stay, who today is the chief technology officer of the blockchain software development firm Pyrofex. "The zip cipher was designed decades ago by an amateur cryptographer -- the fact that it has held up so well is remarkable." But while some zip files can be cracked easily with off-the-shelf tools, The Guy wasn't so lucky. That's partly why the work was priced so high. Newer generations of zip programs use the established and robust cryptographic standard AES, but outdated versions -- like the one used in The Guy's case -- use Zip 2.0 Legacy encryption that can often be cracked. The degree of difficulty depends on how it's implemented, though. "It's one thing to say something is broken, but actually breaking it is a whole different ball of wax," says Johns Hopkins University cryptographer Matthew Green.

The Almighty Buck

Richard Stallman Discusses Privacy Risks of Bitcoin, Suggests 'Something Much Better' (cointelegraph.com) 168

Richard Stallman gave a new interview to the site Cointelegraph, which asked him his feelings about cryptocurrencies. "I'm not against them," Stallman answers "I'm not campaigning to eliminate them, I just don't particularly want to use them."

Cointelegraph then asks Stallman how he feels about tests underway for the Chinese government's own central bank digital currency: Richard Stallman: "Digital payment systems are fundamentally dangerous if they are not engineered to ensure privacy. China is the enemy of privacy. China shows what totalitarian surveillance is like. I consider that hell on earth. That's part of why I haven't used cryptocurrencies that are issued by the community. If the cryptocurrency is issued by a government, it would surveille people just the way credit cards do and PayPal does, and all those other systems meaning completely unacceptable."
Stallman later says "I don't do any kind of digital payments, and the reason is the systems that exist do not respect the user's privacy, and that includes Bitcoin. Every Bitcoin transaction is published." But when Cointelegraph asks about various Bitcoin modifications designed for privacy, Stallman answers "I am not convinced about them." Richard Stallman: In any case, the GNU project has developed something much better, which is GNU Taler. GNU Taler is not a cryptocurrency. It is not a currency at all. It is a payment system designed to be used for anonymous payments to businesses to buy something. It is anonymous through a blind signature for the payer. However, the payee has to identify itself for every purchase in order to get money out of the system. So the idea is you can use your bank account to get Taler Tokens, and you can spend them and the payee won't be able to tell who you are.

It won't be able to tell that you got the token from a particular bank account at a particular time, even though you did so. To convert your payment into money in its own bank, the store (the payee) will have to identify itself. So this gives privacy in a much more reliable way than cryptocurrencies do, and it blocks the idea of using this system to enable tax evasion.

GNU Taler recently had an exciting milestone. A few months ago the eurozone banking system became interested in supporting Taler payments, and just recently they succeeded using a test setup in obtaining Taler tokens with one bank account and paying them to another bank account through the Taler system. Now, it's not something that anybody can use but it will be, and that will be really exciting.

And in response to a question about Facebook's "Libra" digital currency project, Stallman says he hasn't study the details "because the most important thing about it I already know. It's connected with Facebook, and Facebook means surveillance.

"I urge people to join me in absolutely refusing to use Facebook or rather be used by Facebook. Because Facebook doesn't have users. Facebook has used. So don't be a sucker, don't be used by Facebook."
Security

NetWalker Ransomware Gang Has Made $25 Million Since March 2020 (zdnet.com) 20

The operators of the NetWalker ransomware are believed to have earned more than $25 million from ransom payments since March this year, security firm McAfee said today. From a report: Although precise and up-to-date statistics are not available, the $25 million figure puts NetWalker close to the top of the most successful ransomware gangs known today, with other known names such as Ryuk, Dharma, and REvil (Sodinokibi). McAfee, who recently published a comprehensive report about NetWalker's operations, was able to track payments that victim made to known Bitcoin addresses associated with the ransomware gang. However, security experts believe the gang could have made even more from their illicit operations, as their view wasn't complete.
Twitter

A 17-Year-Old's Journey: Minecraft, SIM-Swapping Bitcoin Heists, Breaching Twitter (chicagotribune.com) 135

The New York Times tells the story of the 17-year-old "mastermind" arrested Friday for the takeover of dozens of high-profile Twitter accounts.

They report that Graham Ivan Clark "had a difficult family life" and "poured his energy into video games and cryptocurrency" after his parents divorced when he was 7, and he grew up in Tampa, Florida with his mother, "a Russian immigrant who holds certifications to work as a facialist and as a real estate broker." By the age of 10, he was playing the video game Minecraft, in part to escape what he told friends was an unhappy home life. In Minecraft, he became known as an adept scammer with an explosive temper who cheated people out of their money, several friends said.... In late 2016 and early 2017, other Minecraft players produced videos on YouTube describing how they had lost money or faced online attacks after brushes with Mr. Clark's alias "Open...."

Mr. Clark's interests soon expanded to the video game Fortnite and the lucrative world of cryptocurrencies. He joined an online forum for hackers, known as OGUsers, and used the screen name Graham$... Mr. Clark described himself on OGUsers as a "full time crypto trader dropout" and said he was "focused on just making money all around for everyone." Graham$ was later banned from the community, according to posts uncovered by the online forensics firm Echosec, after the moderators said he failed to pay Bitcoin to another user who had already sent him money to complete a transaction.

Still, Mr. Clark had already harnessed OGUsers to find his way into a hacker community known for taking over people's phone numbers to access all of the online accounts attached to the numbers, an attack known as SIM swapping. The main goal was to drain victims' cryptocurrency accounts. In 2019, hackers remotely seized control of the phone of Gregg Bennett, a tech investor in the Seattle area. Within a few minutes, they had secured Mr. Bennett's online accounts, including his Amazon and email accounts, as well as 164 Bitcoins that were worth $856,000 at the time and would be worth $1.8 million today... In April, the Secret Service seized 100 Bitcoins from Mr. Clark, according to government forfeiture documents... Mr. Bennett said in an interview that a Secret Service agent told him that the person with the stolen Bitcoins was not arrested because he was a minor... By then, Mr. Clark was living in his own apartment in a Tampa condo complex...

[L]ess than two weeks after the Secret Service seizure, prosecutors said Mr. Clark began working to get inside Twitter. According to a government affidavit, Mr. Clark convinced a "Twitter employee that he was a co-worker in the IT department and had the employee provide credentials to access the customer service portal."

The plan was to sell access to the breached Twitter accounts, but Clark apparently began cheating his customers again, the Times reports — "reminiscent of what Mr. Clark had done earlier on Minecraft..."

"Mr. Clark, who prosecutors said worked with at least two others to hack Twitter but was the leader, is being charged as an adult with 30 felonies."
Bitcoin

Steve Wozniak Sues YouTube Over Twitter-Like Bitcoin Scam (bloomberg.com) 39

Apple co-founder Steve Wozniak says YouTube has for months allowed scammers to use his name and likeness as part of a phony bitcoin giveaway similar to the one that was quickly extinguished by Twitter last week. Scammers used images and video of Wozniak, who left Apple in 1985, to convince YouTube users that he was hosting a live giveaway and anyone who sent him bitcoins will get double the number back, according to a lawsuit filed Tuesday in state court in San Mateo County, California. "But when users transfer their cryptocurrency, in an irreversible transaction, they receive nothing back," Wozniak said. From a report: The scam also uses the names and images of other tech celebrities, including Microsoft co-founder Bill Gates and Tesla Chief Executive Officer Elon Musk, according to the suit. YouTube has been "unresponsive" to Wozniak's repeated requests to take down the fraudulent videos, he said. By contrast, Twitter reacted "that same day" after the accounts of Barack Obama, Joe Biden and high-profile users were hacked last week as part of a similar phony bitcoin giveaway, he said. "YouTube has been unapologetically hosting, promoting, and directly profiting from similar scams." Wozniak sued along with 17 other alleged victims of the scam. They are asking the court to order YouTube and its parent company Alphabet to immediately remove the videos and to warn users about the scam giveaways. They are also seeking compensatory and punitive damages.
Bitcoin

Coinbase Says It Prevented Over 1,000 Customers From Sending $280,000 Worth of Bitcoin To Twitter Hackers (theblockcrypto.com) 30

Crypto exchange Coinbase has said that it prevented little over 1,100 customers from sending bitcoin to Twitter hackers who hijacked high-profile accounts to advertise a bitcoin scam last week. From a report: If Coinbase didn't take the step, these customers would have collectively sent 30.4 bitcoin (currently worth about $278,000) to hackers, the exchange's chief information security officer, Philip Martin, told Forbes. Notably, this amount is more than twice the actual amount ($121,000) that hackers collected via victims. Despite Coinbase's action, its 14 customers still fell prey to the scam and sent around $3,000 worth of bitcoin to hackers before the exchange blacklisted their addresses, said Martin. Gemini, Kraken, and Binance users also tried sending bitcoins to the addresses, but not as much as Coinbase's customers, per the report. All these exchanges moved to block the addresses as soon as the scam came to light.

Slashdot Top Deals