Is hacking the new game now?

[Rikafip]

My question is: does it mean that no one can outsmart those hacker?

Hackers are usually one step ahead. Once they discover a vulnerability and exploit it, the other side tries to patch it up. It's a sort of whack a mole game.


Make the explanation sound more naturalMake the tone more conversational

Why is it that their major targets was on well know sites?

Due to a good risk to reward ratio. It's as simple as that.

Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

I'm pretty sure that some of those hacks were inside jobs, but it's more convenient to blame an outside party. What's even more interesting is that it's always the same group of people (those evil guys from North Korea), like no other hacker group exists.

[kingstep]

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

Every organizations knows that her hackers are capable of bridging whatever trust that they hold and in most cases, they are expected to sign that they wont compromise on the internal security framework of the organization. when there is a major hack as this, it is almost certain that every staff that works in the security department will get questioned, if you are caught or found wanting, there is certainly criminal offence implication to it.

Hackers are a big threat to any organization in this digital age and most times, what is being done is almost like saying, "if you want to stop thieves from stealing your things, give them the role of taking care of that same thing. that is where ethical hacking comes into play.

[salad daging]

Back to my question, this year has seems to be the worst year for the crypto space, Duelbits hack, Binance hack, many more hacks that happened on the space. My question is: does it mean that no one can outsmart those hacker?

Against hackers? They are always hidden behind anonymity, one of them is that the site must have a high level of security so that it cannot be hacked, but the reality is that now a lot is happening.

Why is it that their major targets was on well know sites?

Well-known sites have a lot of money in them, especially in centralized or DeFi platforms that are the target of hackers.
It is impossible for hackers to do hacking with nothing in return that they get.

Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

An insider? This is hard to prove unless they have an investigation from their internal team, like at Binance, the engineer's laptop was compromised, we can argue that it was an inside job, but that's all we'll never know who the real culprit is.

There are still plenty of insider question marks, with hacking already trending, perhaps because of the AI technology that powers the hackers.

[Jostern]

I have thought of where to make this post but didn't know the right section to post it. Although, I know that if there is a better place to make you could direct me to move it there.
Back to my question, this year has seems to be the worst year for the crypto space, Duelbits hack, Binance hack, many more hacks that happened on the space. My question is: does it mean that no one can outsmart those hacker?
Why is it that their major targets was on well know sites?
Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

Op trust is a very strong word in the world that we find ourselves now, right now it seems like hacking is a big business for fraudsters, and from the look of things nobody is safe from this hackers, any company can be targeted, hacking is now looking like a very lucrative business.

Talking about trusting your workers or employees, I feel nobody can be trusted, the same people who did set up this site can actually give out information on how this sites can be hacked, so personally I can’t trust anyone, before this things occurs I feel there is someone inside who gives out information, or probably someone inside could be responsible for this hack.

[knowngunman]

Does it mean that no one can outsmart those hacker?

No. It's just that hackers are always one step ahead. Anything created by man is not absolutely perfect and someone can sit somewhere to find the error and a means to exploit them.

Why is it that their major targets was on well know sites?

Because only well known sites have what they looking for. Their mantality is if you risk big, you earn big.

Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker?

Some may involve insider job but some are not. Like I said before, anything man made is not free from error. No matter how much security you developed, someone can dedicate their whole time to study the system and discover the error. If you're looking for someone who's dedicated and patience, then think of hackers. They have this special characters.

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?

You don't just hire random persons, aside their experience you can do some background checks about them.

What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

Division of labour. There are sensitive sections with sensitive data, not every staff can have access to where such data are kept. Only trusted staff should be given such access with a clear and detailed consequences attached. Hold them responsible for any problem that arise from the section they controlled.

[Ishicryptic]

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

For now there are quite a number of theories on why these hacks are happening in big platforms whom we assumed that they must be allocating a lot of funds on the security of their platforms, some are wondering if it is the same hackers that are penetrating these platforms including some of their third party providers. If it is the same hackers I don't know how possible it is for them to have insiders in every of these hacked exchanges and casinos except that they have been planning these hacks for many years and planting their spys as employees of the platforms. What I think is that these hackers have found vulnerabilities to bypass these platforms securities possibly using AI tools and if those vulnerabilities are not detected and contained it won't be the last time that we will hear about major hacks.

[Salahmu]

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

Sometimes even if someone is working for an exchange or any platform it doesn't mean that they have the required information to bring their system down, is only when a staff has access to were the sensitive information of the exchange is before they would succeed but however I believe that exchanges has a way they build there system so that a staff will not be able to leak anything that would compromise all they have been working for, so actually it might seem to us that all the hacking was possible through the assistance of an insider but it might not also be true because if there is, is possible they would have find out considering the technologies they use.

[tabas]

I also wonder...why can't governments go after these hackers, since they have the resources for it

They can't, no matter what punishment they put up to these hackers there's no use to it. There have been past hacking incidents with sums of money, from hundreds of millions to billions and they're all affiliated and tied up to one or two groups that are connected to North Korea. The custody remains on the North Korea's government and how they can sue them if those hacking groups are backed by its own government?

[tech30338]

I have thought of where to make this post but didn't know the right section to post it. Although, I know that if there is a better place to make you could direct me to move it there.
Back to my question, this year has seems to be the worst year for the crypto space, Duelbits hack, Binance hack, many more hacks that happened on the space. My question is: does it mean that no one can outsmart those hacker?
Why is it that their major targets was on well know sites?
Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

Hacking is a very complicated thing, and not always an inside job, this inside jobs happen in a small or unknown exchange which might be the plan all along to fake a scam to run the money, but binance is a company thats been here for a long time, and the people inside were hired and the correct process, what happen in binance is hacking which means someone in the outside breach to the security firewall etc., meaning they were not normal people this is their job and this might have been attempting for so many years for sure with no luck, maybe they have discover a flaws in the system, which they took advantage.

[boyptc]

Each bear market have these hacking incidents and that's the sad thing about it but to say that the hackers can't be outsmarted, I don't think so.

It's the employees who have neglected the security of their systems which allowed these hackers to penetrate. They have to be alert at all times since they're in the money business. There is no more room for mistake.

When you're a financial company that is as big as Binance you should always be ready for a cyber attack because there would be lots of people who would want to try and attack to find out if they can get a piece of the company's worth.  And my memory serving me well, this ain't the first time Binance is getting hit although not in this amount.

Yes, this wasn't the first time they were hacked. If my memory serves right, they've been hacked thrice already. But all of those times they were hacked, they have always recovered.

They have made history once again for this is the biggest hack ever happened for an exchange.

You can't tell when or where your attack would be coming from and this is why I think that it would be extremely difficult to outsmart such coordinated hack. At times having a complete team of faithful and integrity enshrined employees too can actually keep incidents of hacks far away , because some of this hack doesn't just happen independently but with insider aid.

Can't imagine that this exploit only led from someone's mistake, that engineer they have which have opened the hole for that hacker through his laptop.

[Comeacross]

They can't, no matter what punishment they put up to these hackers there's no use to it. There have been past hacking incidents with sums of money, from hundreds of millions to billions and they're all affiliated and tied up to one or two groups that are connected to North Korea. The custody remains on the North Korea's government and how they can sue them if those hacking groups are backed by its own government?

Every measure is useless here. Almost every major hacks that worth millions or even billions are all traced to Lazarus groups. So who do you want to arrest? Unless you want to sue or arrest the North Korean government itself which is impossible. There's a rumour and some evidence too that the North Korea government is the one sponsoring the hackers. Any measure against them is a direct confrontation to their government. The country is leaving on too many sanctions already. The most we can do is to improve security.

[Hypnosis00]

If you see the huge amount of hacking in the past years, you can say it was not just a trend but rather some kind of reality in this internet era.

At first, we thought that known exchanges like Binance were exempt, but they aren't. Instead, these known names are now their target and are waiting for their perfect entry time. The hacking incident seems off to most of us, but instead of doubting the capability of Binance and the rest of the exchanges, we have to trust them. We have to believe that they are not letting this happen. We accept the fact that no perfect system exists.

[Silverstonez]

Hacking is not the new game, because it has been around since before some of us were born.  In my opinion, it has just evolved over the years, from simple computer tricks to sophisticated cyber attacks.  What maven me was that one of the biggest crypto exchange, Binance was hacked for the second time.  I expected them to have strong security measures in place to prevent such incident from happening again, but unfortunate it was hacked for a second time.

[Resourcefulness]

The popularity of hacking is high nowadays and hacking is already becoming quietly accepted as a normal thing, although not yet the new game.
People that are inside an organization have always been a great help to that company being hacked as history have it. So when hacking happens, first place to check is the inside. Not that the security measures are not strong, mostly with the well known sites, hacking doesn't happen so often. When once there's a rotten fish in the fridge it will definitely cause bad odour. Employees are a major resources to a site being hacked.

[tabas]

They can't, no matter what punishment they put up to these hackers there's no use to it. There have been past hacking incidents with sums of money, from hundreds of millions to billions and they're all affiliated and tied up to one or two groups that are connected to North Korea. The custody remains on the North Korea's government and how they can sue them if those hacking groups are backed by its own government?

Every measure is useless here. Almost every major hacks that worth millions or even billions are all traced to Lazarus groups. So who do you want to arrest? Unless you want to sue or arrest the North Korean government itself which is impossible. There's a rumour and some evidence too that the North Korea government is the one sponsoring the hackers. Any measure against them is a direct confrontation to their government. The country is leaving on too many sanctions already. The most we can do is to improve security.

That is what I am saying, unless the US will do an extraction and will go there ready to face North Korea's army on their own lands, that's the only way to punish these hackers. And this is TraderTraitor and Lazarus group, however they call their group is, they're operating under the same hands of KJU and it's not a rumor that they're being sponsored because they're directly working for the government. And that's why even how heavy the sanctions they put, as long as those groups are inside North Korea, it won't do anything at all.

[Shineup]

This does not mean that hackers cannot be caught or will not be caught.  The situation is rather very simple.  Security is a moving target and a lot of times these massive companies get lazy or too confident after a while.  They grow too fast, write terrible codes and do not pay attention to the necessary timely audits until they become victims of a hacker attack.  They always make the mistakes because people are always the weakest link in the chain.

As for your paranoia about insiders leaking everything... I would say you are right, but asking why to trust your employees is overly simplistic.  No one gets a "blank check" of trust the moment they are hired.  Thats why companies use zero-trust technologies, strict compartmentalization, and multi-signature setups so that no worker or dev can destroy everything.

I can go with the word too confident or over confidence of their standard of operation and why they are too relaxed not making auditing a necessity, you actually made a valid point on that and I agree with you 100 percent. Pride goes before a downfall and that's what over confidence can lead to if not in checked. I completely doubt if anything would have been possible without the assistant and getting information from an insider because I don't think they can be too loose to that extend where they can be attacked at randomly.

[collardelay]

I have thought of where to make this post but didn't know the right section to post it. Although, I know that if there is a better place to make you could direct me to move it there.
Back to my question, this year has seems to be the worst year for the crypto space, Duelbits hack, Binance hack, many more hacks that happened on the space. My question is: does it mean that no one can outsmart those hacker?
Why is it that their major targets was on well know sites?
Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

You said it. Brazil's Mercado Bitcoin has just been hit.

[Tungbulu]

They can't, no matter what punishment they put up to these hackers there's no use to it. There have been past hacking incidents with sums of money, from hundreds of millions to billions and they're all affiliated and tied up to one or two groups that are connected to North Korea. The custody remains on the North Korea's government and how they can sue them if those hacking groups are backed by its own government?

That’s basically one of the reasons why these type of cases are very difficult to handle. Simply arresting a few hackers wouldn’t really do much, especially when the groups that’s backing them are operating with total protection from their government. It’s already as if their own government have offered them immunity so holding them accountable may not really be as easy as it seems, even when they are already caught red handed. Even if they’re caught, the least other countries can do is impose sanctions or attempt to disrupt their activities, but getting the money back may actually turn out to be some serious challenge you know.

[o48o]

I have thought of where to make this post but didn't know the right section to post it. Although, I know that if there is a better place to make you could direct me to move it there.

1 Back to my question, this year has seems to be the worst year for the crypto space, Duelbits hack, Binance hack, many more hacks that happened on the space. My question is: does it mean that no one can outsmart those hacker?

2 Why is it that their major targets was on well know sites?
Does it mean that no one can develop a stronger security measures to outsmart those hackers or does it mean that most of the hacks that is happening are from Insider? Or maybe someone who is already in the system are leaking out their information to hacker ?

3 Again, how do you trust the people that are being employed to work with most of the exchange or gambling site?
What are the strategies to ensure that the staff they are hiring is trusted and can not compromised their duties or works, because it's always said that only those who are Inside that can know the way about the system.

I would want to know, and your response will means a lot to me.

I am numbering your questions for clarity

1: Hacker used to be someone who could creatively exploit technology, if they want to use that exploit for patching or gains differs depending on the motives of those hackers. So an answer to your question is that hackers have always outsmarted other hackers.

2: Binance hack with billions to steal is just more appealing target then 100+ millions. They aren't even comparable in gains. And in cases like Binance, it was North Korean hackers, which had a very well working cyber army that stole cryptos even before AI. These days they seem to be unstoppable.

3: They don't "trust" anyone blindly. They vet their staff, like any company with people who have an access to critical information. And this isn't anything "new", industrial espionage has existed since industrial era. Only difference is the data they are stealing isn't copied, but transferred

Also, it's not usually the insider who is criminal, but just being used by criminals.

[Just Say]

If you see the huge amount of hacking in the past years, you can say it was not just a trend but rather some kind of reality in this internet era.

At first, we thought that known exchanges like Binance were exempt, but they aren't. Instead, these known names are now their target and are waiting for their perfect entry time. The hacking incident seems off to most of us, but instead of doubting the capability of Binance and the rest of the exchanges, we have to trust them. We have to believe that they are not letting this happen. We accept the fact that no perfect system exists.

Looking at the huge number of hacking incidents earlier, it seems that hacking is not a new game, but nowadays hackers have become more clever and proficient as a result of which it is seen they are stealing billions of dollars from various exchanges. After other exchanges were hacked earlier, it seemed that Binance might be out of reach but seemed that Binance might be out of reach, but hackers gained access to the system by unauthorized access to an engineer's laptop and as a result, nearly $6.3 billion worth of crypto assets were stolen from it.

On the other hand today we noticed that Brazil's largest exchange Mercado Bitcoinhas confirmed a security breach and Hypernative estimates that more than $40 million worth of suspicious transactions have been detected across ten block chains from this exchange, these hacks make it clear to us that they are not at all concerned about the security of users' crypto assets.