Bitcoin Forum
June 25, 2024, 10:24:44 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: IObit forum hacked, attackers ask to be paid only in DERO, why?  (Read 105 times)
karm_ (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
January 20, 2021, 01:10:34 PM
 #1

During the weekend the iobit forum was hacked and I received an email from the official iobit address inviting me to download the premium version of their software as it would be free for all members for 1 year.
Everything seemed legit until once the installation started I understood that this was a ransomware and nearly all my files in that pc have been encrypted.
It was a complex attack engineered so well that even those with a good sense of security practices fell for it. A good explanation of the attack can be found here

https://www.bleepingcomputer.com/news/security/iobit-forums-hacked-to-spread-ransomware-to-its-members/

The forum is still offline after more than 24 hours, for now after contactig the support the only thing I was advised is to do nothing if possible until the nature of the attack is more clear. I installed it in an old laptop which I hardly ever use so I can wait but that's not much of a consolation.

The strangest thing about this whole story is that these hackers specifically asked to be paid only with a privacy coin called DERO, which I've seen to be virtually unknown for now. I wonder why not choose a more common and easy-to-buy coin like monero? Do they know something about it?
They seem so convinced that its price will go up that they promise (if you pay the ransom of 200 dero) to return the equivalent of $500 back when dero will be worth $ 100/coin. Obviously they're probably just trolling but I wonder why doing all that work and risking so much to ask for such a small cap coin? Are they trying to drive up it's price? They also publicly plead to blame iobit for the attack and ask to pressure them to pay the ransom of 100k dero, after that, they would unlock all the devices. Do you think a company like iobit could ever think of paying the ransom? I checked quickly and to buy 100k dero they would need 5-6 btc (about 200k dollar) but the price of the coin would make at least x4. I have no idea if that amount is affordable for them but although I doubt they will pay they certainly suffered severe reputational damage (already low) with this attack.
If this is the first attack of this type I wonder if in the future there will be others and if they will always ask for dero as a ransom do you think the value of this coin could go up a lot?

All the story is pretty strange, if somebody here have some theories I'd be curious.
Sterbens
Sr. Member
****
Offline Offline

Activity: 1848
Merit: 341


Duelbits.com


View Profile
January 20, 2021, 05:52:57 PM
 #2


If this is the first attack of this type I wonder if in the future there will be others and if they will always ask for dero as a ransom do you think the value of this coin could go up a lot?


I don't think this really guarantees price movements in any market that only has a volume of $ 40,571, and even then only operates in one market (at the moment). Instead, I was wondering why not asking for bitcoin payments? isn't the value much higher? Of course this will trigger a big problem where the thieves have other motives besides hacking into the iobit system.


.
DuelbitsSPORTS
▄▄▄███████▄▄▄
▄▄█████████████████▄▄
▄██████████████████████▄
██████████████████████████
███████████████████████████
██████████████████████████████
██████████████████████████████
█████████████████████████████
███████████████████████████
█████████████████████████
▀████████████████████████
▀▀███████████████████
██████████████████████████████
██
██
██
██

██
██
██
██

██
██
██
████████▄▄▄▄██▄▄▄██
███▄█▀▄▄▀███▄█████
█████████████▀▀▀██
██▀ ▀██████████████████
███▄███████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
▀█████████████████████▀
▀▀███████████████▀▀
▀▀▀▀█▀▀▀▀
OFFICIAL EUROPEAN
BETTING PARTNER OF
ASTON VILLA FC
██
██
██
██

██
██
██
██

██
██
██
10% CASHBACK
          100% MULTICHARGER
karm_ (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
January 20, 2021, 07:42:10 PM
 #3


If this is the first attack of this type I wonder if in the future there will be others and if they will always ask for dero as a ransom do you think the value of this coin could go up a lot?


I don't think this really guarantees price movements in any market that only has a volume of $ 40,571, and even then only operates in one market (at the moment). Instead, I was wondering why not asking for bitcoin payments? isn't the value much higher? Of course this will trigger a big problem where the thieves have other motives besides hacking into the iobit system.


In the attached html pages the hackers advise to buy dero on tradeogre or kucoin, probably these are the only ones with real volume. Btw I think the fact that it has such a low volume is one of the reason why the price could move in the future if these attacks will be repeated.
I can agree they have maybe other motives and thats the strange part that I'd like to understand, usually in this kind of attack they ask for bitcoin or maybe monero.
karm_ (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
January 27, 2021, 02:05:40 PM
 #4

A little update on this strange story: https://www.bleepingcomputer.com/news/security/ransomware-gang-taunts-iobit-with-repeated-forum-hacks/
Hackers blame IObit for not being able to restore their server after more than a week. They renew their request for 100k dero and threaten other attacks and leaks.
IObit hasn't made any official statements yet, quite scandalous in my opinion.
jacafbiz
Hero Member
*****
Offline Offline

Activity: 2114
Merit: 530


Enterapp Pre-Sale Live - bit.ly/3UrMCWI


View Profile
January 27, 2021, 04:21:38 PM
 #5

This could be an inside job, maybe the hacker is sitting on bags of DERO tokens and saw an opportunity to hack the website so if he demands for DERO token in payment the hackee will need to go to exchange to go and bid for DERO tokens and the hacker will be the one selling his tokens to him. This do not make sense, because it seems something somewhere is fishing

█████████████████████
█████████████████████████
█████████▀▀▀▀▀▀▀█████████
██████▀███████████▀██████
█████▀███▄▄▄▄▄▄▄███▀█████
████████▀▀▀▀▀▀▀▀▀████████
█████████████████████████
█████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█████
█████████████████████████
██████▄███████████▄██████
█████████▄▄▄▄▄▄▄█████████
█████████████████████████
█████████████████████
 
    CRYPTO WEBNEOBANK    
▄▄███████▄▄
▄███████████████▄
▄██████░░░░░░░░░░███▄
▄████▄▄███████▄▄░░░██▄
▄█████████████████░░░██▄
████░░▄▄▄▄▄▄▄▄▄░░░░░░░░██
████░░██████████░░░░░░░██
████░░▀▀▀▀▀▀▀▀▀░░░░░░░░██
▀█████████████████░░░██▀
▀████▀▀███████▀▀░░░██▀
▀██████░░░░░░░░░░███▀
▀███████████████▀
▀▀███████▀▀
Febo
Legendary
*
Offline Offline

Activity: 2730
Merit: 1288



View Profile
January 27, 2021, 10:40:52 PM
 #6

IObit forum hacked

I would stay away from them. And reformat your computer right now. You can get a malware in their software and they steal your private keys when you will want to pay them or when you will want to buy this silly coins.
Flowzer
Full Member
***
Offline Offline

Activity: 490
Merit: 107



View Profile
January 27, 2021, 11:34:47 PM
 #7

This could be an inside job, maybe the hacker is sitting on bags of DERO tokens and saw an opportunity to hack the website so if he demands for DERO token in payment the hackee will need to go to exchange to go and bid for DERO tokens and the hacker will be the one selling his tokens to him. This do not make sense, because it seems something somewhere is fishing

Its logic and possible move which hacker takes. I dont see DERO have any privacy feature to hide the track of its move, so maybe the plan is they sold all of their DERO on exchange, buy some privacy coin and getting lost as fast as possible before the exchange block their account.

|   Facebook   |     Twitter     |                                       R A N G E R S                                       |    Discord    |    Medium    |
|    Telegram   |                                        ─────     PROTOCOL     ─────                                        |    Gitbook    |
████  ███  ██  █          VIRTUAL WORLDS BLOCKCHAIN INFRASTRUCTURE          █  ██  ███  ████
karm_ (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
January 28, 2021, 09:54:31 AM
 #8

This could be an inside job, maybe the hacker is sitting on bags of DERO tokens and saw an opportunity to hack the website so if he demands for DERO token in payment the hackee will need to go to exchange to go and bid for DERO tokens and the hacker will be the one selling his tokens to him. This do not make sense, because it seems something somewhere is fishing

Its logic and possible move which hacker takes. I dont see DERO have any privacy feature to hide the track of its move, so maybe the plan is they sold all of their DERO on exchange, buy some privacy coin and getting lost as fast as possible before the exchange block their account.

As far as I have seen dero is a privacy coin that derives from monero but has been rewritten from 0 so it should be as anonymous as that, it is however strange that they have chosen to request dero rather than monero anyway since it is much easier to buy and widespread.
longyenthanh
Sr. Member
****
Offline Offline

Activity: 1221
Merit: 250



View Profile
January 28, 2021, 10:20:13 AM
 #9

This could be an inside job, maybe the hacker is sitting on bags of DERO tokens and saw an opportunity to hack the website so if he demands for DERO token in payment the hackee will need to go to exchange to go and bid for DERO tokens and the hacker will be the one selling his tokens to him. This do not make sense, because it seems something somewhere is fishing

Its logic and possible move which hacker takes. I dont see DERO have any privacy feature to hide the track of its move, so maybe the plan is they sold all of their DERO on exchange, buy some privacy coin and getting lost as fast as possible before the exchange block their account.

As far as I have seen dero is a privacy coin that derives from monero but has been rewritten from 0 so it should be as anonymous as that, it is however strange that they have chosen to request dero rather than monero anyway since it is much easier to buy and widespread.

Also, the most likely scenario seems to me to be that the hacker is fully packed in DERO.
Another thing may be that DERO is completely random and the attacker had completely different intentions and it is only a distraction from the true intentions of the hacker.
We almost certainly don't know something yet, which is why IObit doesn't make an official statement.


       ▄▄███▄    ▄███▄▄
     ▄▀▀    █    █    ▀▀▄
    ██    ▄▄▀    ▀▄▄    ██
    ▀▄▄▄█▀▀        ▀▀█▄▄▄▀
  ▄▄█▀█▄              ▄█▀█▄▄
▄█▀     ▀▀█▄     ▄▄█▀▀     ▀█▄
██          ▀█▄▄█▀          ██
▀█▄     ▄▄▄█▀▀  ▀▀▀▄▄▄     ▄█▀
  ▀█▄▄▄▀▀            ▀▀▄▄▄█▀
   █▀▀▄▄▄            ▄▄▄▀▀█
   ██  ▀▀▀▄▄      ▄▄▀▀▀  ██
    ▀▄     █      █     ▄▀
      ▀▀▄▄▄▀      ▀▄▄▄▀▀
.
cogwise
  ▄
█  █
  █
█  █
  █
█  █

  █
█  █
  █
█  █
  █
█  █
  ▀
.
Hyper-charge your trading with intelligent insights   ▄
█  █
  █
█  █
  █
█  █

  █
█  █
  █
█  █
  █
█  █
  ▀
▄█████████████████████▄
███████████████████████
████▀███████▀   ▀▀▀▄███
███▌  ▀▀███▌       ▄███
███▀               ████
███▄              █████
████▄            ██████
█████▄▄        ▄███████
████▄       ▄██████████
███████████████████████
▀█████████████████████▀

▄█████████████████████▄
███████████████████████
████████████████▀▀█████
███████████▀▀▀    █████
██████▀▀▀   ▄▀   ██████
███▄     ▄█▀     ██████
██████▄ █▀      ███████
███████▌▐       ███████
████████ ▄██▄  ████████
██████████████▄████████
▀█████████████████████▀

▄█████████████████████▄
███████████████████████
█████  ▄▄▄▄▄  ▄▀███████
█████  █████  ██▄▀█████
█████  █▀▀██▄▄▄▄  █████
█████  █▀▀▀▀▀▀▀█  █████

█████  █▀▀▀▀▀▀▀█  █████
█████  █▀▀▀▀▀▀▀█  █████
█████  ▀▀▀▀▀▀▀▀▀  █████
███████████████████████
▀█████████████████████▀

karm_ (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
February 19, 2021, 05:05:32 PM
 #10

Ok guys maybe no one cares but I think an update on the situation is a must.

1 month passed since the hack and iobit forum is still offline Undecided
The price of dero in dollars since I made this thread has doubled but I don't think it is because of the purchases by IOBIT, very similar movements can be seen in other coins as well.. Who knows?

No official statement from the "antivirus" company yet  Roll Eyes
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!