Hacker backdoors popular JavaScript library to steal Bitcoin funds

guest · Nov 26, 2018

Hacker backdoors popular JavaScript library to steal Bitcoin funds
November 26, 2018
https://www.zdnet.com/article/hacker-backdoors-popular-javascript-library-to-steal-bitcoin-funds/

A hacker has gained (legitimate) access to a popular JavaScript library and has injected malicious code that steals Bitcoin and Bitcoin Cash funds stored inside BitPay's Copay wallet apps.

The presence of this malicious code was identified last week, but only today have researchers been able to understand what the heavily obfuscated malicious code actually does.

This is an extremely popular JavaScript library, with over two million weekly downloads on the npm.org repository [...] its original author [...] handed its development over to another programmer named Right9ctrl.
Right9ctrl had immediately poisoned the library with malicious code.

Once the malicious code has been compiled and shipped inside poisoned versions of the Copay wallet app, it will steal users' wallet information, including private keys, and send it to the copayapi.host URL on port 8080.
Click to expand...

Log in or Sign up

Hacker backdoors popular JavaScript library to steal Bitcoin funds

guest Guest

Log in or Sign up

Hacker backdoors popular JavaScript library to steal Bitcoin funds

guest Guest

Useful Searches