U.S. authorities have indicted two suspected hackers of the EtherDelta crypto exchange in December 2017.
One of two suspects - Elliot Ganton, alsoknown as “Glubz" - a 20-year-old Briton who participated in the TalkTalk hack. Another is Anthony Tyler Nashatka, also known on the network as “Crazy” - a New Yorker.
In just two weeks, they managed to buy an EtherDelta employee’s mobile phone on the black market and steal the funds of thousands of EtherDelta users with it.
According to court documents, the operation beganDecember 13, when hackers acquired the personal data of an EtherDelta employee on the darknet. The obtained sensitive data allowed attackers to bypass two-factor authentication (2FA) on the EtherDelta account (admin). After that, they changed the DNS settings on the company's portal and redirected traffic through their British server to their fake site that mimics the EtherDelta platform. Here, hackers collected cryptocurrency addresses and private keys of users.
DNS redirection lasted only a fewhours until it was discovered. After detection, the attackers quickly finished work and began to withdraw funds. Although the court documents did not say how much they earned, one of the victims of the hacking reported a loss of more than $ 800,000.
If the guilt of the suspects is proved, each of the crackers faces up to 20 years in prison and fines of up to $ 250,000.