EXPLORINEER
en

UK — The Register

October crypto-tracker hack: Access cracked, law enforcement tokens packed

Security1 min read

Chainalysis, a company that helps track crypto money, says hackers broke into its systems in October. The hackers may have taken login data and live access tokens, which are keys that let a program act as a user.

What happened

Chainalysis now says attackers got usernames, password hashes, and live tokens. A password hash is a scrambled version of a password. A live token is a digital key that can give access without a password. Earlier updates said user IDs, full names, email addresses, and job role labels were exposed. The company shut down several services while it fixes its systems. These include the Reactor investigation platform, used by police, and the KYT anti-money-laundering tool.

Key facts

  • The company detected the intrusion on October 30.
  • Chainalysis says it has no evidence that investigation data was accessed or changed.
  • The password reset feature is down for now.
  • KYT and Address Screening were planned to come back online on November 5.
  • Customers must give trusted IP addresses to get access again.

Some background

Chainalysis helps banks, governments, and police trace stolen or illegal crypto. Its tools are often used to help police investigations. The company has not said who did the attack. It hinted that the attackers used an AI agent, which is a program that can carry out steps on its own.

Why it matters

Police and banks use Chainalysis tools to follow crypto crime. If attackers hold live tokens or stolen logins, they could try to reach sensitive tools. The company says it is making users reset passwords and change API keys, which are codes that let programs connect to its services.

What to watch

  • Whether Reactor and Data Solutions come back online safely.
  • Whether Chainalysis names who was behind the attack.
  • Whether the company finds any misuse of investigation data.
  • Whether more tech companies report similar AI-driven attacks.

Glossary

Chainalysis
A blockchain analysis company that helps track crypto transactions for banks, governments, and police.
password hashes
Scrambled versions of passwords, used so the real password is not stored in plain text.
live tokens
Digital keys that can give access to an account without needing a password.
Reactor
A blockchain investigation platform used by international law enforcement customers.
API keys
Secret codes that let software programs connect to a service safely.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

Matsuya App Restored After 9 Days, With Up to 3x Points as an Apology

Matsuya Foods Holdings announced on November 6 that the Matsuya official app, suspended since October 28 after unauthorized access, has been restored and requires an update to use. Through November 30, the bento reservation service "Matsuya Bento Net" offers double Matsuya Points, and mobile orders earn triple points. The company disclosed on October 30 that about 2.38 million pieces of personal information had been leaked from the app's management system.

SecurityITmedia

Lottery Official Site Suspended After User Passwords Were "Unintentionally Changed"; Scope Under Investigation

The official Takarakuji (lottery) X account said on November 5 that it had confirmed an issue in which users' passwords on the official lottery website were changed unintentionally, and that it had suspended use of the site. It is working quickly to identify the scope and will notify affected users once details are known. As of 10 a.m. on November 6, the site still showed a suspension notice with no restoration timeline, and the "continuous purchase campaign" could not be applied for.

SecurityThe Register

Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up

US federal agencies, including the FBI and CISA, urged owners and operators of industrial smart freezers to disconnect them from the internet, apply patches, and change default passwords. The warning follows hacks of thousands of refrigeration systems at hundreds of grocery stores in Europe since mid-October, which raised temperatures to 50ºC and spoiled food. The article notes no documented attacks on American supermarkets had been confirmed at the time of publication.

SecurityThe Register

Threat actor targets Indian fintechs on weekends when defenders aren’t watching

India's CERT-IN has warned of a "significant escalation" in attacks by an AI-assisted threat actor it calls CRAFTY FALCON, which targets fintechs and payment providers. The group re-targets victims, including after incomplete remediation, and times attacks to holidays and weekends to delay detection. CERT-IN urges better logging, real-time monitoring, keeping test environments off the internet, and 24x7 monitoring.