when

April

Status

On April 20, a pseudonymous security researcher, dm557, raised an alarm about a nefarious project on GitHub, highlighting the presence of an AI bot designed to steal crypto assets.
<h2 id="span-style-font-weight-400-how-this-ai-bot-steals-crypto-span">How This AI Bot Steals Crypto</h2>
dm557 <a href="https://twitter.com/dm557/status/1781671693746077923" rel="noopener noreferrer nofollow">discovered</a> a “checkrug.py” file within the ai bot, containing an encrypted binary script designed to decrypt data and transmit private keys. Private keys are crucial in cryptocurrency transactions, acting as digital signatures. If these keys fall into the wrong hands, it can result in significant financial losses.
Evilcos, the <a href="https://thecoinrise.com/slowmist-report-claims-that-around-75-of-laundered-eth-moves-to-tornado-cash/" rel="noopener noreferrer nofollow">pseudonymous founder of SlowMist</a>, a well-known blockchain security firm, confirmed dm557’s findings and explained the bot’s operation. He noted the presence of a backdoor code within the bot, allowing it to steal users’ private keys.
Evilcos <a href="https://twitter.com/evilcos/status/1781857393259020349" rel="noopener noreferrer nofollow">warned</a> the crypto community to be cautious when encountering complex code, as it could hide malicious intent. He emphasized that in the open-source world of cryptocurrency, code should be readable and understandable. Complex or “garbled” code could indicate something fishy.
<h3 id="span-style-font-weight-400-current-status-and-risks-span">Current Status and Risks</h3>
As of press time, the project’s developer has removed the backdoor code. However, experts have cautioned against downloading the AI bot, suggesting that the removal of the malicious code might be a ploy to deceive unsuspecting users into downloading it.
Crypto developer Greysign <a href="https://twitter.com/greysign1/status/1781879652560322941" rel="noopener noreferrer nofollow">advised</a> staying away from repositories with a history of malicious activity. Despite the apparent removal of the backdoor, there’s a risk that it could be reinstated once more users download the bot.
Remarkably, the project’s author <a href="https://twitter.com/greysign1/status/1781709226857153006" rel="noopener noreferrer nofollow">blocked</a> attempts to flag it as risky, indicating an attempt to conceal its true nature.
<h2 id="span-style-font-weight-400-implications-and-context-span">Implications and Context</h2>
In the cryptocurrency market’s volatile and complex environment, AI bots have become essential tools for traders. The rapid fluctuations in prices pose challenges for manual trading strategies. Consequently, traders are <a href="https://thecoinrise.com/cftc-warns-against-ai-scams-targeting-crypto-investors/" rel="noopener noreferrer nofollow">increasingly turning to AI-powered bots</a> for their ability to quickly analyze market data and execute trades.
However, the discovery of this malicious AI bot serves as a stark reminder of the <a href="https://thecoinrise.com/phishing-scam-adverts-targets-users-of-etherscan/" rel="noopener noreferrer nofollow">risks involved in relying on such tools</a>. Traders and users must exercise caution when downloading and using software, especially from unverified sources.
The incident also underscores the importance of vigilance within the cryptocurrency community. With the rise of innovative technologies, security measures must continuously evolve to combat new threats and protect users’ assets.
The post <a href="https://thecoinrise.com/crypto-stealing-ai-bot-discovered-on-github/" rel="noopener noreferrer nofollow">Crypto Stealing AI Bot Discovered on GitHub</a> appeared first on <a href="https://thecoinrise.com" rel="noopener noreferrer nofollow">Latest News and Insights on Blockchain, Cryptocurrency, and Investing</a>.

Crypto Stealing AI Bot Discovered on GitHub

目次

TheCoinrise Media

2024年4月22日公開の他の記事

Surveillance Law, signed by Biden Stirring Privacy and Security Debates

Bitcoin Fees Plummet After Record $128 Average On BTC Halving Day

Top Crypto Gainers Today Apr 22 – Ontology, Chainlink, Stacks, Ankr Network

SEC: Case against Tron Founder falls under U.S. jurisdiction

Emergence of AI in the Workspace Requires Skills Development

Qurax Exchange Unveils Multi-Chain Crypto Trading Platform with Integrated Financial Services and...

ニュースレターを購読して暗号資産の最新情報を毎日入手！