Bitcoin processor victim of DDoS attack - $1 Million in BTC stolen

Denmark-based Bitcoin Bitcoin While some may still be wondering what is Bitcoin, who created Bitcoin, or how does Bitcoin work, one thing is certain: Bitcoin has changed the world.No one can remain indifferent to this revolutionary, decentralized, digital asset nor to its blockchain technology.In fact, we’ve gone a long way ever since a Florida resident Laszlo Hanyecz made BTC’s first official commercial transaction with a real company by trading 10,000 Bitcoins for 2 pizzas at his local Papa John’s.One could now argue that While some may still be wondering what is Bitcoin, who created Bitcoin, or how does Bitcoin work, one thing is certain: Bitcoin has changed the world.No one can remain indifferent to this revolutionary, decentralized, digital asset nor to its blockchain technology.In fact, we’ve gone a long way ever since a Florida resident Laszlo Hanyecz made BTC’s first official commercial transaction with a real company by trading 10,000 Bitcoins for 2 pizzas at his local Papa John’s.One could now argue that Read this Term payment processor BIPS, fell under attack recently to a DDoS Attack DDoS Attack A distributed denial of service (DDoS) attack is defined as an attempt by malicious actor to overwhelm a targeted server, website, or network with a flood of internet traffic. Most often this takes the shape of a machine or network becoming unavailable to users for a period of time through the systematic disruption services of a host connected to the Internet.These attacks are most effective when multiple compromised computer systems and other internet-connected devices are exploited as sources A distributed denial of service (DDoS) attack is defined as an attempt by malicious actor to overwhelm a targeted server, website, or network with a flood of internet traffic. Most often this takes the shape of a machine or network becoming unavailable to users for a period of time through the systematic disruption services of a host connected to the Internet.These attacks are most effective when multiple compromised computer systems and other internet-connected devices are exploited as sources Read this Term on their system. The end result of the attack was the theft of 1,295 BTC equaling approximately $1 million.

The 15th of November saw the first attack wave, followed by a second wave 2 days later on the 17^th. The result of the attack “overloaded our managed switches and disconnected the iSCSI connection to the SAN on BIPS servers,” and left several wallets emptied and compromised. By the 19^th of November, BIPS was able to restore all of their merchant services, but have disabled all wallets until the investigation is complete. The help desk was also disabled, and was restored on the 22^nd.

“Regrettably, despite several layers of protection, the attack caused vulnerability to the system, which has then enabled the attacker/s to gain access and compromise several wallets,” stated a release from BIPS about the attacks.

Kris Henriksen, CEO of BIPS, did emphasize that the majority of funds stolen were from the company’s own holdings. The funds were taken from BIPS’ “Hot-Wallet” that works off an algorithm to decide how many funds are needed to place immediate transfers. Henriksen also mentioned that all merchants using the processor’s auto-conversion option were not affected by the attack.

Further internal investigation shows the attacks originated “from Russia and neighboring countries”, and has lead BIPS to believe both attacks are connected.

Security concerns are always of utmost importance when using online wallets. Attacks such as these are the fear of many Bitcoin holders who use online wallet services. BIPS does offer a paper-wallet option to keep the funds offline and safe. BIPS is recommending that all wallet holders transfer their funds to other wallet solutions until further notice.

Image courtesy of Flicker