In the early hours on Thursday, Bitcoin.org greeted visitors with a pop-up window saying that “the Bitcoin Foundation is giving back to the community” as a gesture to “support our users who have helped us along the years.”
The message included a QR code with a Bitcoin address that users were invited to send coins, after which they would receive twice the amount.
The rest of the website’s functionality at the time was limited so that users couldn’t get past the message.
By press time, the address received a total of nine transactions worth 0.40571238 Bitcoin (about $17,800 in current prices), with some users on Twitter suggesting that those could be self transactions to make an illusion of legitimate activity.
Promoting giveaway scams has been a popular tactic among cybercriminals in recent years. They often impersonate well-known persons and celebrities, with the likes of Tesla CEO Elon Musk, Microsoft founder Bill Gates, and Ethereum co-founder Vitalik Buterin among the names used by hackers.
Bitcoin.org is the oldest crypto-related website that was registered by Satoshi Nakamoto and Martti Malmi back in 2008. It’s not affiliated with the Bitcoin Foundation, a non-profit organization founded in 2012.
Crypto Twitter on alert
The crypto community was quick to react to the incident, with multiple warning messages quickly flooding Twitter.
⚠️ Alert! Bitcoin(.)org has been taken over maliciously by scammers. Unbelievable fuckup by whoever was in charge. This is really bad. ⚠️
Namecheap, the hosting provider for Bitcoin.org, was alerted as well, and it didn’t take the company long to temporarily disable the domain, winning plaudits for prompt action.
Hello, Thank you for reporting this matter. We have temporarily disabled the domain.
To add to the tension, Cøbra, the current pseudonymous operator of Bitcoin.org, reacted to the incident only a couple of hours later, confirming that the website was compromised and that the incident is being investigated.
While the exact way the hackers managed to compromise Bitcoin.org remains unclear, Cøbra suggested that attackers exploited a flaw in the DNS configuration after the website moved to Cloudflare two months ago.
https://t.co/OsFgRFRRZb hasn't been hacked, ever. And then we move to Cloudflare, and two months later we get hacked.
Can you explain where you were routing my traffic too? Because my actual server didn't get any traffic during hack. @Cloudflare@eastdakota.
By press time, Bitcoin.org looks to be accessible again, however, the direct URL for the Bitcoin white paper hosted on the platform shows a "This site can’t be reached” message.
In June this year, after Cøbra chose to preserve his pseudonymity rather than defend himself against charges of copyright infringement, Bitcoin.org lost a legal battle against the self-proclaimed Bitcoin inventor Craig Wright, with a UK court ordering the website to remove the Bitcoin white paper for UK visitors.
Shortly after the legal defeat, Bitcoin.org was hit with a severe DDos attack, with attackers demanding a ransom of 0.5 BTC.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
A school in Scotland has said it will be the first in the UK to start accepting Bitcoin payments.
Lomond School in the town of Helensburgh said that it made the choice to accept the cryptocurrency after a number of parents—both local and foreign—made the request, The Times reported.
The private boarding school has a number of international students.
To "manage and mitigate risk," the school said it would start accepting the biggest cryptocurrency in phases, and would convert digital coins rec...
BlackRock’s spot digital asset-focused funds generated net inflows for a fifth consecutive quarter, but the value of those assets tumbled by 9% as the price of Bitcoin and Ethereum slumped, the company said in its latest earnings release.
As of March 31, the world’s largest asset manager held $50.3 billion worth in ETF digital assets, about $5 billion less than in the previous quarter, according to the release.
Still, among asset managers, BlackRock remained the leader in inflows with the iShare...
Ripple Labs and the U.S. Securities and Exchange Commission have jointly filed a request to suspend their respective appeals as they “pursue a negotiated resolution” of their long-running case.
As detailed in a filing submitted yesterday to the U.S. Court of Appeals for the Second Circuit, the two parties have already reached an agreement-in-principle, with Ripple CEO Brad Garlinghouse revealing last month that the SEC would be dropping its appeal.
Yesterday’s application represents the first of...