As a seasoned cybersecurity analyst with extensive experience dealing with high-profile hacking incidents, I find the recent reports of multiple failed login attempts by hackers targeting Mt. Gox creditors deeply concerning. Having witnessed similar situations in my career, I can empathize with the anxiety and uncertainty these users must be feeling.


As a researcher studying the aftermath of Mt. Gox’s closure, I’ve come across reports from its creditors detailing repeated hacking attempts against their accounts. The exchange itself notified them of these failed login bids, indicating that cybercriminals were determined to gain access and steal substantial amounts of bitcoin and Bitcoin Cash during the payout process.

As an analyst, I’ve come across posts on the r/mtgoxinsolvency subreddit from users expressing their concerns after encountering multiple login attempts on their accounts. One particular user, u/ovkovk, reported receiving fifteen notifications for unsuccessful login attempts and being unable to access their account. They went on to mention that they had received a total of twenty-two such emails. These events have left them questioning the current security status of Mt. Gox.

Hackers’ persistent efforts suggest they are using a brute-force method to crack account passwords, aiming to gain entry through sheer luck. Additionally, u/ovkovk noted that at this stage, it is impossible to modify payee information. This news may bring comfort to those affected as hackers will be unable to alter the details regarding repayment destinations and ultimately collect the funds themselves.

Several users have shared their concerns about receiving notifications and emails due to unauthorized login attempts by hackers. Yet, no one has reported a successful breach resulting from these incidents.

From my research perspective, a user provided an insightful explanation regarding the potential reason behind the Mt. Gox hacking attempts. They suggested that the attackers might have obtained a list of Mt. Gox users and their email addresses. Utilizing this information, they are attempting to brute force their way into as many accounts as possible. In simpler terms, the attackers are trying various combinations of passwords for each email address on the list. However, the user reassured that if you have two-factor authentication (2FA) enabled on your account, you should ideally be safe from these attacks.

When the disturbing news about Mt. Gox emerged, the Mt. Gox team took swift action and deactivated the claims page to shield unsuspecting creditors from potential harm caused by hackers. The page displayed a message reading, “Currently undergoing maintenance.”

 

Read More

2024-07-19 16:57