PT-2013-5106

Name of the Vulnerable Software and Affected Versions Bitcoin-Qt versions 0.8.x Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a large amount of tx message data. Recommendations For versions 0.8.x, consider restricting the...

PT-2013-4236

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions prior to 0.4.9rc2 bitcoind and Bitcoin-Qt versions 0.5.x prior to 0.5.8rc2 bitcoind and Bitcoin-Qt versions 0.6.x prior to 0.6.5rc2 bitcoind and Bitcoin-Qt versions 0.7.x prior to 0.7.3rc2 wxBitcoin affected...

PT-2013-4235

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions 0.8.0 through 0.8.1 Description The issue allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in olde...

CVE-2013-3219: Undefined Security Weakness

bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions...

CVE-2013-4627: Undefined Security Weakness

Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a denial of service memory consumption via a large amount of tx message data...

CVE-2013-3220: Undefined Security Weakness

bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service split an...

California issued cease and desist order against Bitcoin Foundation

The Bitcoin Foundation has received a cease-and-desist letter from the California Department of Financial Institutions, which oversees banks, credit unions, and other financial organizations operating in the state. Jon Matonis, who is a board member at the Foundation, revealed the letter on Forbe...

California issued cease and desist order against Bitcoin Foundation

The Bitcoin Foundation has received a cease-and-desist letter from the California Department of Financial Institutions, which oversees banks, credit unions, and other financial organizations operating in the state. Jon Matonis, who is a board member at the Foundation, revealed the letter on Forbe...

Yahoo, Bing Results Directing to Bitcoin Phishing Site

It looks like phishers have started poisoning Bing and Yahoo search results in hopes of duping users of the Bitcoin exchange site MtGox.com into giving away their log-in credentials. KrebsonSecurity.com reported that both the search engines have been redirecting unsuspecting clickers to MtPox.com...

Peer-to-Peer Botnet Takedowns a Challenge

The FBI, Justice Department and technology companies have had success shutting down botnets that rely on a centralized infrastructure and command and control servers to communicate with bots, steal data or send malicious commands. Peer-to-peer botnets, however, have proven more difficult to take...

Click-Fraud Falls as Microsoft Fights ZeroAccess Malware

Microsoft said actions it has taken to stymie the ZeroAccess malware have resulted in a drop off in click-fraud traffic. Microsoft Malware Protection Center researchers Tommy Blizard and Nikola Livic made the observation based on a precipitous drop-off in click-traffic on Microsoft’s extended...

Bitcoin mining malware found in E-Sports Entertainment (ESEA) software

+software.png The Bitcoin mining rig is becoming a popular alternative to people who want an easy way to earn the digital currency. All you have to do is plug the hardware that specializes in Bitcoin mining and run its customized software. After that, you can sit back and relax as it mines the...

Bitcoin mining malware found in E-Sports Entertainment (ESEA) software

+software.png+software.png The Bitcoin mining rig is becoming a popular alternative to people who want an easy way to earn the digital currency. All you have to do is plug the hardware that specializes in Bitcoin mining and run its customized software. After that, you can sit back and relax as it...

Malware that turns computers into Bitcoin miners

Researchers from Kaspersky Lab have discovered a new spam message campaign being transmitted via Skype contains malware capable of using an infected computer to mine for Bitcoins. The malware, identified as Trojan.Win32.Jorik.IRCbot.xkt. Bitcoin is a non-governmental, fully-digital currency based...

Malware that turns computers into Bitcoin miners

Researchers from Kaspersky Lab have discovered a new spam message campaign being transmitted via Skype contains malware capable of using an infected computer to mine for Bitcoins. The malware, identified as Trojan.Win32.Jorik.IRCbot.xkt. Bitcoin is a non-governmental, fully-digital currency based...

Skype Malware Stealing Victims' Processing Power to Mine Bitcoins

Bitcoin may still be a virtual unknown quantity for most people, but the digital currency has not escaped the notice of attackers, many of whom are turning their attention to finding ways to use the system for their own gains. The attacks against Bitcoin exchange Mt. Gox and hack of Instawallet...

Bitcoin's Wallet Service Instawallet Hacked, suspended indefinitely

The digital currency Bitcoin has suffered yet another hack. Bitcoin wallet site Instawallet has been taken offline after a security compromise, has suspended its service indefinitely. Instawallet didn't say in a notice on its website how many bitcoins were stolen after hackers fraudulently access...

DDoS Attack, Database Breach Take Down Two Bitcoin Services

As with any asset of monetary value, once said asset reaches a noteworthy level, cybercriminals’ interest is going to pique. Such is the current situation with virtual currency Bitcoin, which hit a high of $142 yesterday and the value of all Bitcoins in circulation has soared to more than $1...

Bitcoin's Wallet Service Instawallet Hacked, suspended indefinitely

The digital currency Bitcoin has suffered yet another hack. Bitcoin wallet site Instawallet has been taken offline after a security compromise, has suspended its service indefinitely. Instawallet didn't say in a notice on its website how many bitcoins were stolen after hackers fraudulently access...

CVE-2013-2273

bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in th...