Foreign hacker who stole $1.18 million in crypto assets extradited to Korea

[lovesmayfamilis]

The story currently being shared online shows how those who love free perks have to pay a hefty price for them.
We've all heard at one point or another that there's no need to buy the Windows operating system, as there are tons of activators online that can do it for free. This is precisely how a hacker made his money, defrauding 2.8 million people between 2020 and 2023, "earning" approximately $1.18 million.

From April 2020 to January 2023, the suspect distributed malicious software called KMSAuto — disguised as a Microsoft Windows activation tool — approximately 2.8 million times worldwide.
 
The malware employed a so-called “memory hacking” technique, automatically replacing cryptocurrency wallet addresses with the hacker’s own during transactions conducted on infected computers.
 
The scheme targeted users who did not use licensed activation software.
 
Over 3,100 wallet addresses were infected, and cryptocurrencies were intercepted in more than 8,400 transactions, totaling about 1.7 billion won. Among the victims were eight Koreans, who lost a combined 16 million won.
 
Korean police launched an investigation in August 2020 after receiving a report from a user who said they had lost one bitcoin — worth approximately 12 million won at the time — due to a transaction being redirected to the wrong address.

https://bitlist.co/search?content=Microsoft%20Windows%20activation%20tool%20&limit=20




I found similar posts in local sections, but I think beginners will also find this necessary.
https://bitcointalk.org/index.php?topic=5570136.msg66241598#msg66241598 (Portuguese)
https://bitcointalk.org/index.php?topic=5566588.msg66248352#msg66248352
https://bitcointalk.org/index.php?topic=5090319.msg66238011#msg66238011 (Indonesian)

[odunybiz]

Hackers almost everywhere doing all possible things to steal from people. Extra measures should be taken with any device one store it's asset this days. You shouldn't just buy and install software any how nor download software anyhow, as this may be too dangerous for your aset.

[Outhue]

Freebies, the most dangerous way that you can use to betray yourself, if you believe that nothing comes for free you will escape many traps set for humans in general.

Like I have said in my past posts on this forum, the day you start paying for premium softwares is the day you will start enjoying your PC even more, the need to restart and format your PC because of weird behaviour or malware activities will reduce greatly.  I have passed this test and I saw a huge difference.

I stopped using free windows OS with activators, rather I bought my own with it's key, every softwares and games on my PC are paid for, no more free softwares via torrent that will later make my PC to start slowing down or using CPU resources. Back to crypto theft,  a PC with free softwares and games installed should worry those who want to install crypto wallet on such PC, where are they getting their confidence from? Any money related softwares shouldn't be running on such PCs.

This is yet another reason why hardware wallet will safe you from alot of troubles.

[Die_empty]

The story currently being shared online shows how those who love free perks have to pay a hefty price for them.
We've all heard at one point or another that there's no need to buy the Windows operating system, as there are tons of activators online that can do it for free. This is precisely how a hacker made his money, defrauding 2.8 million people between 2020 and 2023, "earning" approximately $1.18 million.

This is a vivid example of the concept of "Greek gift". Someone who cracked or pirated copies of a product that cost an organisation so many resources to produce shouldn't be trusted. Such an individual would take advantage of anybody if they had the opportunity.

There is a proverb that says "nothing is free, even in Freetown," which is true. If you want to enjoy a service, pay for it and stop seeking for shortcuts. It's so sad that the victims are learning it the hard way. It is also a lesson to all of us, including me, because the temptation of getting a free version of an expensive application is so strong.

[God Of Thunder]

There is a proverb that says "nothing is free, even in Freetown," which is true. If you want to enjoy a service, pay for it and stop seeking for shortcuts. It's so sad that the victims are learning it the hard way. It is also a lesson to all of us, including me, because the temptation of getting a free version of an expensive application is so strong.

I think I have heard something like "If you are getting a product for free, then you are the product, not what you are getting". The saying may not be entirely accurate, but its meaning is similar. We often install free VPN's, Photo editors, and camera apps on our phone, and those applications get access to our device and probably steal sensitive information and sometimes make changes that we never even know.

The example in the OP is a good one. I think I have used the KMSauto activator before and I have seen other peoples using it to activate their windows. Most local computer shops use such tools to activate their customers Windows. We are risking our informations and falling in trap just to save some money.

[Sanitough]

Honestly I feel nervous now, because I used that app before to activate Microsoft Office to avoid paying for the license fee. I even used it on some of the computers in our office. So far I haven’t lost anything and I’ve been using it for years already.

My current laptop is safe though since it came with a licensed copy and I stopped using that app on it. Still, I’m glad you shared this.
I definitely won’t be using that app anymore on our other PCs once the company decides to buy new ones.

[SamReomo]

Most users of windows operating system don't want to buy a genuine windows activation key and that's the main reason why they install such activators but they don't know that such activators are created with intention of stealing data and information of the users and are malicious.

The ones who create such activators are often hackers or top level programmers/reverse engineers, and such people can surely hire malicious software quite easily. It's better to move to Linux as that's a much better operating system and free from any type of malware, but even if someone uses Windows OS then he/she should never use such activation software or Key generators as those are malicious.

[pawanjain]

Even I had used a windows activator once but I think it was from a genuine source. I certainly did not install this KMSAuto software.
Later I got a new laptop and didn't need an activator since then and luckily I didn't face any such attack till date.
The hackers are wise to target windows activator since they know people will definitely install this software.
Unfortunately, a lot of people ended up losing a hell lot of money just in the process of saving a small amount.

[Raytheon]

“There is no such thing as a free lunch” - the quote is so damn true. Nowadays, Windows with full license is pre-installed in every new computer and with only a few bucks extra, one can buy a shared Office 365 Family slot (~ USD 15/person/year). I don't get it why people still use KMSAuto and then fall for malware.

Aside from Microsoft softwares, I remember that Adobe softwares also gather a lot of activation tools. OP's story is also a big warning for those who like using non-licensed tools.

[LoyceV]

You guys need to "activate" your software? Is this something I'm too Open Source to understand?

If you don't want to pay for software, or better, if you just want better software, learn how to use Linux. Download a Linux distribution, install it, try it for a few days, download a few others, try them all, and see what works best for you. It's a skill you'll use for the rest of your life.

[Doan9269]

The story currently being shared online shows how those who love free perks have to pay a hefty price for them.

We need to be careful, so that others will not take that which we hold unto at the course of trying to add more to them, scam is now taking newer dimensions and we cant pretend that nothing is happening when all these are taking place and huge sum of money were at stake, scam is real, we shouldn't allow our greediness deceived us to go for what is not it, so that we don't end up getting to where we never expected and lose more instead of getting more.

[Faisal2202]

The story currently being shared online shows how those who love free perks have to pay a hefty price for them.
We've all heard at one point or another that there's no need to buy the Windows operating system, as there are tons of activators online that can do it for free. This is precisely how a hacker made his money, defrauding 2.8 million people between 2020 and 2023, "earning" approximately $1.18 million.

Before getting into cryptocurrency I also used to do the same thing, I either download unlocked windows ISO image files or uses some activation keys etc. Like tried many things from the tutorials but once I stepped into crypto especially on this forum, I started learning more about such incidents. I learned how many members of this forum lost their funds even one from my local community lost his funds to one of the famous software site getintopc.

I also used to download softwares from there even the windows Images files. I stopped everything even the other softwares, since crypto I started buying the activition from official sources rather than from pirates sites.

I learned it the easy way, but it is really sad for these people to learn this lesson the hard way, anyone attached to the forum knows more than the people are not and that's 100% true. We must guide everyone to start spending time on btt or altt so they can learn and understand more.

[cryptomaniac_xxx]

That's is the price to pay if you are a crypto user but then uses pirated OS that you can download in the Net. That's one attack vector that this criminals has been using for years and still up to this day, maybe there are still some who rather take that big risk not to buy original and genuine software.

So that's one lesson here, and another is that if you are going to hold a lot of crypto then obviously buy a hardware wallet and then learn safety practices. And if you are going to download then, just make sure that it's from the official source and you have to verify it first.

[sleepfirefly]

there is a saying that sometimes being cheap leads to more excess money like those who buy discounted products in order to save but the quality isn’t that good

being cheap all the time isn’t a good thing you need to learn to invest in the right things or softwares so at least you are secure even if it costs a little more

[Davidvictorson]

The thing I love with every hacker or scammer’s story is that at the end they get caught. Their hacking or scamming “onslaught “ may persist for many years but eventually, they get caught. They lose everything and most probably live the rest of their lives in prison.
Unfortunately, these stories do not make all beginners take caution. Some actually think that they are “un-hackable” or “un-scamable” until it happens to them.

[Cricktor]

Since when "every hacker and scammer" gets caught? I believe that only a fraction is published openly, merely as a legitimation that police and investigators do "something" and to legitimate some stupid laws that hamper freedom for the majority (very loosely speaking).

And state-sponsored and protected hacking groups are a whole other story.


The moral of this story: don't use closed-source shady software to unlock/activate your OS when you don't know what's inside. Or much better, avoid using Windows for your crypto wallet and other money related stuff. Why do you want to use a spy-on-you OS with a dominant market share that therefore is the number one target for hackers?

[SmartGold01]

This actually shows how free food do purges people, and of course it's always advisable to use a licensed widow instead of using another alternative to bycute the fees and buying of the activation key they got compromised.
Usually, I do not love going for free things irrespective of how cheaper or lower it could be or even though it's worth zero dollars. After what do comes into my mind is what could be his or her aim of doing that or being that nice, then I do have this thinking at back of my mind that "before someone gives you something for free you should know that there is a place they are getting it in folds.

[nakamura12]

I actually seen this name somewhere online when I check about microsoft when I heard my friend mentioned about activation of the os. I never thought that it is a malware. I wonder what will those people think how the hell their wallets got drained of the funds. A free isn't always good as the free might have something hidden intentions like this activation tool which will make people think that it's just an activation tool and nothing else.

[dkbit98]

Again those ''evil'' North Korean hackers with their super powers
It's interesting that micr0s0ft recently disabled a way to register wind0ws 10 and 11 crap without internet connection.
Easy solution is to stop using wind0ws and switch to free open source linux OS alternatives, that have almost no issues with malware, and it's much safer to use it for Bitcoin wallets.

[lovesmayfamilis]

It's interesting that micr0s0ft recently disabled a way to register wind0ws 10 and 11 crap without internet connection.
Easy solution is to stop using wind0ws and switch to free open source linux OS alternatives, that have almost no issues with malware, and it's much safer to use it for Bitcoin wallets.

Windows is popular because many users love gaming, and some games aren't always convenient to play on Linux. I say this because my children and my husband are gamers, and their games don't work on Linux, although I prefer KDE Neon on my laptop.

My gaming computer doesn't contain any important data, but it runs Windows 11, activated via PowerShell, and accelerated by disabling all the unnecessary AtlasOS. I don't want to buy from Microsoft, not because I'm stingy with the money, but because I don't need it. Is activating via PowerShell also dangerous, even though the computer is essentially just for gaming?