A popular Bitcoin discussion forum warned on Monday some user passwords may have been intercepted after the site's DNS (Domain Name System) registrar was breached.
An attacker found a flaw in Bitcointalk.org's domain name registrar, a company based in Japan called Anonymous Speech, wrote an administrator for the forum who goes by the nickname "Theymos." Anonymous Speech could not immediately be reached for comment.
Tampering with a DNS server is a powerful attack. A hacker can direct traffic destined for one website to one that he or she controls, even if a person types in the correct domain name in the URL address bar of a browser.
The attacker could then execute a man-in-the-middle attack on Bitcointalk.org, intercepting encrypted forum submissions, passwords sent during login sessions, authentication cookies, private messages and more, Theymos wrote.
To read this article in full or to leave a comment, please click here
ConversionConversion EmoticonEmoticon