Electrum Lightning

A botnet with more than 140,000 machines has launched a DoS attack on the server of Bitcoin wallet Electrum in an attempt to direct users to counterfeit software that steals bitcoins. Security researchers say that if a user installs a fake version of Electrum, all funds contained in the fake version will be lost immediately.

According to The Next Web, the attackers even implemented their own Electrum servers, which hosted the attacked Electrum.

Deploying 'NoteContract' ------------------------ transaction hash: 0x88a6131cb89fcf... d72d3f92ceb2e Blocks: 0 Seconds: 0 contract address: 0x0611Afc2fac9B72f5a75E1BC330Ba4c5da10 3217 account: 0x8b7A68cFf3725ca1b682XLb575bC891e381138ef8 balance: 0 gas used: 0 gas price: 0 gwei value sent: 0 ETH total cost: 0 ETH.

Lightweight Bitcoin Wallet Electrum announced that the next version will support Lightning network payments, implemented with Python, an electrum network node where wallet users do not need to run Lightning network nodes themselves to make payments, and electrum's Lightning network nodes have now been merged into the Electrum master branch.

It turns out that the FTP account password used to upload local user information, with a normal Electrum Installer file, is used once the user installs it, and sensitive information entered under Electrum is sent to a remote malicious FTP server for reception.

Examples of online wallets: Breadwallet (BRD), Mycelium, Electrum, Out of Egypt.

Once everything is set up, you can use Electrum. Have Fun.

At the time of writing, at least 1,450 BTCs worth about $11.6 million had been stolen from phishing attacks that faked Electrum upgrade tips. DeViable Security Labs hereby suggests that versions of Electrum below 3.3.4 are vulnerable to such phishing attacks, and users using Electrum Wallet are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released, and do not use the link in the prompt to avoid asset losses.

Although we recommend that individual users set up their own Electrum server, you can also use the official Blockstream Electrum server if you prefer, and the table below contains details of the connection. The server operates on the same principle as Blockstream Explorer: no logs, no traceability, and Tor support.

Electrum wallets were attacked by phishing and about 245 BTCs were stolen.