The data of clients of the largest crypto-exchanges are put up for sale on the darknet

[Brother]

Dread sells user data for Bittrex, Poloniex, Bitfinex and Binance.

Someone using the pseudonym ExploitDOT offers data (including IDs and driver's licenses) from clients of the leading cryptocurrency exchanges Bittrex, Poloniex, Bitfinex and Binance on the underground Dread marketplace, provided by users as part of the KYC client identification procedure.

According to CCN, the sale was posted on the site back in July 2018. For a hundred copies of IDs, the seller asks for only $ 10, and for a wholesale purchase, a discount of up to $ 1 for a package of 1,000 documents is offered if the buyer places an order of 25,000 or more. As the seller notes, he has files about users from all countries at his disposal. where Bittrex, Poloniex, Bitfinex and Binance operate.

According to the publication, a cybersecurity researcher, who wished to remain anonymous, managed to get files about three users of the Binance exchange under the guise of a buyer. To confirm that the information is genuine, the attacker sent the expert photographs in which people held a sheet with the words “Binance” in one hand and a passport or driver's license in the other.

The researcher contacted representatives of the exchange, but they announced some "inconsistencies" between the purchased documents and the data provided by users. As the representative of the trading platform emphasized, no signs of unauthorized access to Binance systems have been identified, but the exchange has speculations as to how the information could end up in the wrong hands. However, a Binance spokesman did not disclose whose fault the data leak could have occurred.

KYC (Know Your Customer) is a banking and exchange regulation term for financial institutions and bookmakers, as well as other companies working with private money, meaning that they must identify and establish the identity of the counterparty before conducting a financial transaction.