[mothered]

Greetings to all,

Yet another Interesting article I've stumbled across, that clearly demonstrates the Insecurity of dealing via a given online gateway.

Tuesday morning between the hours of 12:00 am and 2:00 am EST, internet traffic to MyEtherWallet was being redirected to servers in Russia. Any users who ignored the unsigned SSL certificate warning presented when visiting the site during this time were surprised and saddened to find their Ethereum wallet drained dry.

According to infosec blog Double Pulsar, the attackers hijacked a Border Gateway Protocol router near an internet exchange in Chicago to reroute DNS traffic to Amazon's Route 53 commercial cloud service. From there the hackers were able to redirect MyEtherWallet users to their bogus servers and empty their wallets. The Verge reports that at least $13,000 worth of Ethereum was stolen in the two hours that the DGP attack went unnoticed and that the attackers’ wallet already contained over $17 million in the cryptocurrency.

Source.

[Pikami]

First time seeing this sort of thing, they hacked the router and forwarded traffic to their own servers, genius!

[Bish0pQ]

Well this is a suprising way to obtain ETH. Doesn't surprise me they're aiming for crypto's though, they're less secure as banks and it's fast & easy money.

[mothered]

Doesn't surprise me they're aiming for crypto's though, they're less secure as banks and it's fast & easy money.

Agree.

It was as simple as rerouting traffic to their servers. If It were a longer duration, a lot more than $13,000 would've been taken.