Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: BTCPay Server users
Incident: Exploitation of a critical vulnerability to steal cryptocurrency from hot wallets.
Impact: Direct financial loss through the unauthorized drainage of Bitcoin and Litecoin.
Attacker: Unidentified threat actors
Analysis: Threat actors exploited a flaw in BTCPay Server versions 2.4.1 and older to steal .macaroon credential files. These files granted unauthorized access to LND nodes, allowing attackers to move funds from hot wallets. While a patch was released in August, users running legacy versions remain high-risk targets.
Recommendations: Update BTCPay Server to the latest version (2.4.7) immediately.; Migrate to a fresh server and generate new wallets if running version 2.4.1 or older.; Minimize the amount of cryptocurrency held in hot wallets used for daily operations.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source