extension attacked
Either Chrome has a vulnerability that lets extensions install themselves, or his system is far more compromised than he thinks it is.
this post was submitted on 09 Apr 2024
165 points (99.4% liked)
Buttcoin
399 readers
3 users here now
Buttcoin is the future of online butts. Buttcoin is a peer-to-peer butt. Peer-to-peer means that no central authority issues new butts or tracks butts.
A community for hurling ordure at cryptocurrency/blockchain dweebs of all sorts. We are only here for debate as long as it amuses us. Meme stocks are also on topic.
founded 11 months ago
MODERATORS
NFTs can contain code that messes with your Metamask wallet. SVG NFTs can contain JavaScript. Now, you might think any attention would be paid to security.
no way can you make Trojan horse nfts 😭😭😭 what a stupid system
Dude if you have 500k in crypto, how do you not have hardware wallets?
Edit: new keyboard still learning
Or at least a few million in your other diversified investments. You didn’t put it ALL in crypto, right?
Absolute insanity. Makes me think this is fake.
fake? because of 500k? have you not seen these fools?
sir has evidently had the considerable good fortune not to encounter coiners
I mean, I own crypto and believe in it, but I generally stay away from crypto fanatics on either side.
Friendly word of advice that you may, in fact, be lost
Y’all were on /all, so I decided to stop by. 🤷🏻♂️
the way you interact with posts on all is to call them fake in spite of all evidence to the contrary? that sounds exhausting
I own crystals and believe in their healing powers, but I generally stay away from fanatics on either side.
I own crypto and believe in it
Believe in it to what end?
What happen ?
Somebody set up us the rug.
We get signal.
What !
Main screen turn on.
It's you !!
How are you degentlemen !!
All your ape are belong to us.
You are on the way to destitution.
What you say !!
You have no chance to survive make your time.
Ha ha ha ha ...
Captain !!
Take off every 'SCAM'!!
You know what you doing.
Move 'SCAM'.
For great injustice.
Maybe don’t install shady crypto extensions next time. Or don’t log into your wallet in public WiFi just so you can accidentally show off to the person sitting behind you at Starbucks.
Quite often it’s another payload that installed the browser extension on the user’s host.
SEO poisoning or malicious adverts, for instance posing as legitimate tools like FileZilla etc, leads to a malicious payload (loader, RAT, etc) that in turn downloads and installs the malicious browser extension.
Install adblockers. Genuinely. It’s insane how many adverts on Google and Bing etc are straight up malicious. It’s been a problem for years now.
While this is good advice, as the local ButtcoinMaximalist(tm, OG do not steal) I think this is only pleb protection, you know for the normal people. Butters should do more, be your own bank as they say. So clearly it is ops own fault that he lost his money, he should have setup a IDS which should have warned his SOC that something was wrong and then they should have taken action. Be your own bank! ;)
But yeah it is amazing how a standard bank protection like 'it is not possible to transfer huge amounts of cash/assets without additional checks and balances' would simply stop most of this crime. But that requires centralization. (Google is also bad, and getting worse, I now double check download urls for tools via secondary sources and half the time also virustotal the exe files. But im paranoid).
But crypto is centralized XD Who pushes the commits? Who builds the binaries? The ledger may be distributed but it’s still all controlled by a centralized entity - the developers.
Developers with even less oversight than the democratic/economic process. It gets worse when you take into account the people running all the servers/miners etc.
46 hours, guess they’re no longer obsessively refreshing charts now that most of the hype is gone and number can’t give that constant high
But also megalol at these clowns still not having learned to do separation safely. It will never cease to entertain me.
coiners: self-custody!
also coiners: oh no, how can I make this issue caused by my own actions due to self-custody somebody else’s problem?
Maybe off topic, but can you realistically "steal" crypto? It's just a system where you need a key to authorize transactions. It's not tied to a person, it's tied to a key.
It's like, "who you are" part of authentication doesn't exist, so therefore who you are wouldn't define ownership.
Can you really "steal" money? It's just paper with numbers written on it, just because the person who possesses the paper has changed doesn't mean the paper has.
Yeah, but if you steal my money, the centralized state can punish you and demand restitution. It's like when Seth Greene had his NFT phished, he had no legal recourse to get it back.
Has there been any case where people stealing crypto got them in trouble? The only thing I've seen is where people create rug pulls and they get charged with fraud, so legal repercussions against an organization.
Has there been any case where people stealing crypto got them in trouble?
lol holy shit
Sam Bankman-Fried was sentenced to 25 years for stealing crypto. I'm sure other people have been charged too, but someone who gets caught stealing $100 of crypto probably won't make the news.
how quick we are to forget the outlaw rapper razzlekhan and her toilet phone
Interesting. I used that video to look up the FBIs report, so the two listed got charged with money laundering. It says they "seized" the remaining Bitcoin, but it didn't specifically mention it got returned to bitfinex? Considering it was stolen in 2016 and recovered in 2022.
I also wonder how that affects sentencing and/or restitution. Considering they stole $70m of securities but it was recovered at $3.6b.
Also, I wonder how the charges would have changed if they didn't attempt to obfuscate it. Like would they just get wire fraud and using a computer to commit a crime? Maybe their charges were more than what was covered in the article. I didn't see a charge listed for actual theft. Maybe they couldn't easily prove they did the hack but could prove they laundered the crypto so that's all they prosecuted on.
there's a jurisdictional issue on the hack, it's not even clear it was a crime committed in the US.
the money laundering was straightforward though.
Yes, you can steal crypto?
Deconstruct the ledger or what have you, but real world people have a concept of ownership that is sufficient to define theft.
there used to be coiners who advocated precisely this theory of ownership, but we tend to hear these days from the captains of industry who desperately seek out the statist boot to lick when their apes are cryptographically reassigned
Other peoples crypto? No. My crypto? Yes.
Transcript: Tweet from "Sell When Over | 9000.sei" at 10:17 PM on 7 April 2024.
Just realized I got $500k drained from multiple wallet apps 46 hours ago
Think I got extension hacked, with two suspicious extensions that appeared on my chrome browser
does not feel good fam
still investigating