Security vulnerability exposes users’ credentials on LocalBitcoins.com

Date:

Share post:

LocalBitcoins, a cryptocurrency exchange portal, stated that it suffered a security breach on January 26, 2019. The breach, which lasted for almost five hours, was countered by the company after some users reported that they’re redirected to a fake website while accessing the LocalBictoins login page.

Describing the incident as a third-party software related problem, LocalBitcoins stated that some unknown intruders tried to illegally collect the login credentials from users to exploit their digital assets. The trading platform was taken down temporarily disabling all the transactions to prevent hackers from stealing bitcoins from the users’ accounts. The company took the necessary measures to address the issue and secure the accounts that might have been at risk.

The Finland-based bitcoin startup is a person-to-person bitcoin trading platform that allows users from different countries to exchange their local currency to bitcoins. The company claims that its trading site allows users to post advertisements where they can provide exchange rate and payment methods for buying or selling bitcoins.

“We would like to inform that today 26.01.2019 at approximately 10:00:00 UTC, LocalBitcoins has detected a security vulnerability – an unauthorised source was able to access and send transactions from a number of affected accounts. Outgoing transactions were temporarily disabled while we investigated the case,” LocalBitcoins stated in a post. “We were able to identify the problem, which was related to a feature powered by a third-party software and stop the attack. At the moment, we are determining the correct number of users affected – so far six cases have been confirmed. For security reasons, the forum feature has been disabled until further notice.”

“Your LocalBitcoins accounts are currently safe to log in and use – we encourage you to enable Two-factor authentication, if you have not yet,” LocalBitcoins added.

Subscribe

Name(Required)
Privacy(Required)

Upcoming Events

Related articles

Who Do We Fire When the Agent Gets It Wrong? Inside the Agentic AI SOC

By Jeremy Hehl Agents can triage, enrich and correlate at machine speed. But someone still has to own the...

Cyber Insurance Is No Longer Optional: In the Age of AI-Driven Threats, Can Your Business Afford the Risk of Being Unprotected?

By Kareena Bavisi, Chief of Staff | EC-Council It comes down to one number: what your worst incident would...

Why AI Governance Is Becoming Cyber Insurance’s Next MFA

By Kareena Bavisi, Chief of Staff to CEO at EC-Council I set out to understand why companies still don’t...

What the Nuclear Treaty Got Right, and Why AI Still Can’t Use It

By Jay Bavisi, Founder & Group President, EC-Council Nuclear treaties stopped bombs. They don't stop a file you can...