This sounds funny to me. The attacker of Nexus Mutual asks for ransom after he stole the money. The hacker has cash out into ether worth 2.6 million USD. I just wonder How a CEO of crypto start up send his asset via compromised version of metamask. It does not make sense to me. Compromised version of METAMASK means fake metamask. Oh no, fake metamask can steal your money. Hacking in crypto is becoming common news. There are tens of cases with million usd lost. The case is repeated again and again. Cryptocurrency is claimed to be immutable but the case of hacked wallet disturbs my mind. Where is the security of cryptocurrency if too many hacked assets. In the future, news about hacking will decorate some top newsfeeds. Hacking using compromised version of metamask or fake wallet is not new. Ethereum wallet I think the most hacked wallet in cryptocurrency. With the defi projects, there are many coins are wrapped in eth network. Wbtc, wnxm and other wrapped coins in eth are fragile to be hakced because the wallet is secured by smart contract. Hackers find the weakness in smart contract or cloning with fake wallet.
There are many hackers that use domain name system. Hacker encrypt pop up in the browser from the users to steal Ip address and browser history. Using metamask compromised version is another way to steal money from ethereum wallet.
What is metamask compromised version?
I do not find a description of compromised metamask version. I found a lot of posts that hackers still metamask private key via spoofing wifi,
In the poorly-worded Dec. 16 message, the attacker addresses Karp directly, and seems to suggest that they will cease selling off the stolen NXM until the price recovers or Karp sends 4,500 ETH.
Hello Hugh. I will not sell wNXM any more until wNXM recovers his value or you send me 4.5k ETH. If you need any negotiation with me, send msg to my eth address. Following are your addresses. You are rich, Hugh [...]https://cointelegraph.com/news/the-nexus-mutual-hacker-is-now-asking-for-a-2-6m-ransom
