BitcoinTalk Server Compromised During Social Engineering Attack

Popular digital currency forum BitcoinTalk has been taken offline following a social engineering attack that resulted in a server compromise.

AccessTimeIconMay 22, 2015 at 6:21 a.m. UTC
Updated May 9, 2023 at 3:02 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Popular digital currency forum BitcoinTalk has been taken offline following a social engineering attack that resulted in a server compromise.

The attack is said to have targeted the site's ISP, a company called NFOrce that is based in the Netherlands. During a social engineering attack, an attacker tries to manipulate the target with the goal of convincing them to divulge passwords or other sensitive information.

  • Why MoonPay and PayPal Partnered to Expand Crypto Adoption in the U.S.
    14:12
    Why MoonPay and PayPal Partnered to Expand Crypto Adoption in the U.S.
  • Friend.Tech's Native Token Tanks After Airdrop
    00:55
    Friend.Tech's Native Token Tanks After Airdrop
  • Coinbase's Blowout First Quarter; Could Hong Kong ETFs See $1B AUM by 2024 End?
    01:56
    Coinbase's Blowout First Quarter; Could Hong Kong ETFs See $1B AUM by 2024 End?
  • BronxCrypto Founder on Major Challenges Faced by Crypto Education
    00:59
    BronxCrypto Founder on Major Challenges Faced by Crypto Education
  • The compromise was announced via the official BitcoinTalk Twitter account. Operator Theymos later took to the bitcoin subreddit to offer a more detailed explanation, writing:

    "The forum's ISP NFOrce managed to get tricked into giving an attacker access to the server. I think that the attacker had access for only about 12 minutes before I noticed it and had the server disconnected, so he probably wasn't able to get a complete dump of the database."

    Theymos said that BitcoinTalk could remain offline for as many as 60 hours following the incident, and cautioned users to "act as though your password hashes, PMs, emails, etc. were compromised".

    Future updates about the situation will be posted to the Twitter account, according to Theymos, and a full report will be published once the forum is back online.

    NFOrce and Theymos did not immediately respond to requests for comment.

    Image via Shutterstock

    Disclosure

    Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

    CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


    Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.