3894 matches found
CVE-2019-13098
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...
CVE-2019-13098
The CVE describes a password disclosure in TronLink Wallet 2.2.0 where the user password is logged during CreateWalletTwoActivity, allowing other authenticated apps/users with access to the device log (Logcat) to read it. The issue is tied to logging sensitive data and, on Android versions before...
PT-2019-13124
Name of the Vulnerable Software and Affected Versions TronLink Wallet version 2.2.0 Description The issue concerns the storage of user passwords in logs when the CreateWalletTwoActivity class is called via the registration form. This allows other authenticated users to read the password from the...
PT-2019-13122
Name of the Vulnerable Software and Affected Versions TronLink Wallet version 2.2.0 Description The issue allows an attacker to gain unauthorized access by reading and reusing a user's keystore. This is possible because the keystore is stored in plaintext and placed in insecure storage. An attack...
CVE-2019-13096: Cleartext Storage of Sensitive Information
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/sharedprefs/ .xml to gain unauthorized access...
CVE-2019-13098: Insertion of Sensitive Information into Log File
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...
Firecoin Wallet App Has Information Leakage Vulnerability
Firecoin Wallet is a professional multi-currency wallet, relying on the technical strength of Firecoin Group to provide convenient and reliable digital asset management services. There is an information leakage vulnerability in Firecoin Wallet APP, which can be exploited by attackers to obtain...
Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers
Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...
Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers
Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...
Malicious Package
Overview All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment...
Soaring Cryptocurrency Prices Draw Malicious Apps, Malware
The price of Bitcoin is steadily surging in May and hackers are looking to cash in on the uptick with fake cryptocurrency apps, malware and other related scams. In May 2019, Bitcoin prices climbed to their highest points this year, with the popular cryptocurrency being worth $8,300 its highest...
Binance Hacked — Hackers Stole Over $40 Million Worth Of Bitcoin
Binance, one of the largest cryptocurrency exchanges in the world, confirmed today that the company lost nearly $41 million in Bitcoin in what appears to be its largest hack to date. In a statement, Binance's CEO Changpeng Zhao said the company discovered a "large scale security breach" earlier o...
Binance Hacked — Hackers Stole Over $40 Million Worth Of Bitcoin
Binance, one of the largest cryptocurrency exchanges in the world, confirmed today that the company lost nearly $41 million in Bitcoin in what appears to be its largest hack to date. In a statement, Binance's CEO Changpeng Zhao said the company discovered a "large scale security breach" earlier o...
Rapidly Growing Electrum Botnet Infects Over 152,000 Users; Steals $4.6 Million
An ongoing attack against Electrum Bitcoin wallets has just grown bigger and stronger with attackers now targeting the whole infrastructure of the exchange with a botnet of over 152,000 infected users, raising the amount of stolen users' funds to USD 4.6 million. Electrum has been facing cyber...
Electrum DDoS botnet reaches 152,000 infected hosts
By Jérôme Segura, Adam Thomas, and S!Ri We have been closely monitoring the situation involving the continued attacks against users of the popular Electrum Bitcoin wallet. Initially, victims were being tricked to download a fraudulent update that stole their cryptocurrencies. Later on, the threat...
Electrum Bitcoin wallets under siege
By Adam Thomas and Jérôme Segura, with additional contributions from Vasilios Hioueras and S!Ri Since at least late December 2018, many users of the popular Electrum Bitcoin wallet have fallen victim to a series of phishing attacks, which we estimate netted crooks well over 771 Bitcoins—an amount...
iChain Insurance Wallet App for iOS Directory Traversal Vulnerability
iChain Insurance Wallet App for iOS is an e-wallet application based on the iOS platform. A directory traversal vulnerability exists in iChain Insurance Wallet App for iOS. A remote attacker can gain access to arbitrary files, such as those associated with an application on an iOS device...
CVE-2019-5923
Directory traversal vulnerability in iChain Insurance Wallet App for iOS Version 1.3.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...
