ShapeShift

ShapeShift Exchange Hacked for $230000

March 14, 2016
Attack Types: 
Insider Attack ,Infrastructure Attack ,Wallet Hack
Entity Types: 
Custodian ,Exchange
Target Entities: 
ShapeShift

Summary # Between March 14 and April 9, 2016, the Swiss-based cryptocurrency exchange, ShapeShift, experienced three security breaches. The initial compromise was an insider threat, where an employee responsible for the platform’s security and infrastructure misappropriated funds. Subsequently, this individual provided an external threat actor with critical assets: the source code of ShapeShift’s core system, the IP address of the primary server, an SSH private key, and deployed a Remote Access Trojan (RAT) on a colleague’s workstation. ...