BitSong founder bitangel84 said he was hacked on July 14 in what he described as a fake remote interview setup. According to his account, a person identified as Kostiantyn Pustovyi first contacted him on LinkedIn about a Web3 gaming collaboration and then asked him to clone a project repository and run "yarn install" as part of the process. He said the dependency package contained an obfuscated script that sent key credentials stored in his local environment variables to an attacker-controlled server. The attacker also asked him to test an online game and connect a wallet. Bitangel84 said the loss review is still underway and that he cannot yet confirm how many wallets had assets drained. He said he will continue to update the investigation.
BitSong founder bitangel84 said he was hit by a hacking attack on July 14.
In his post, he said Kostiantyn Pustovyi had contacted him through LinkedIn to discuss a Web3 gaming collaboration. The exchange then moved into what was presented as a remote interview, during which he was prompted to clone a project code repository and run "yarn install" to install dependencies.
Bitangel84 said an obfuscated script hidden in those dependencies sent key credentials stored in his local environment variables to an attacker server. He also said the attacker asked him to test an online game and connect a wallet.
He added that the damage review has not been completed and that he cannot yet confirm how many wallets had assets drained. He said he will keep posting updates as the investigation continues.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
