Exodus Malicious Torrent File ColonelGray - Revision history

Azoundria: Another 30 minutes complete. All sources merged in. Prevention added.

2023-08-30T20:52:57Z

Another 30 minutes complete. All sources merged in. Prevention added.

Show changes

Azoundria at 21:38, 7 May 2023

2023-05-07T21:38:08Z

Show changes

Azoundria at 22:34, 2 March 2023

2023-03-02T22:34:31Z

← Older revision		Revision as of 16:34, 2 March 2023
Line 63:		Line 63:

	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	{{Prevention:Individual:Store ~~funds offline~~}}		{{Prevention:Individual:Store Funds Offline}}

	{{Prevention:Individuals:Always Verify Executables}}		{{Prevention:Individuals:Always Verify Executables}}

Azoundria: remove template

2023-03-02T22:09:18Z

remove template

← Older revision		Revision as of 16:09, 2 March 2023
Line 1:		Line 1:
	~~{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/exodusmalicioustorrentfilecolonelgray.php}}~~[[File:Exodus.jpg\|thumb\|Exodus]]Reddit user ColonelGray stored a screenshot of their seed phrase on their PC when setting up their wallet. Some time later, they downloaded a malicious torrent screensaver file which ended up running a larger program. This resulted in the hacker gaining access to the seed phrase screenshot and using it to withdraw from their wallet.		[[File:Exodus.jpg\|thumb\|Exodus]]Reddit user ColonelGray stored a screenshot of their seed phrase on their PC when setting up their wallet. Some time later, they downloaded a malicious torrent screensaver file which ended up running a larger program. This resulted in the hacker gaining access to the seed phrase screenshot and using it to withdraw from their wallet.

	== About Exodus ==		== About Exodus ==

Azoundria: /* Individual Prevention Policies */

2023-03-02T22:08:20Z

Individual Prevention Policies

← Older revision		Revision as of 16:08, 2 March 2023
Line 67:		Line 67:
	{{Prevention:Individuals:Always Verify Executables}}		{{Prevention:Individuals:Always Verify Executables}}

	~~For the full list of how to protect your funds as an individual, check our [[~~Prevention ~~Policies For~~ Individuals~~]] guide.~~		{{Prevention:Individuals:End}}

	== Platform Prevention Policies ==		== Platform Prevention Policies ==
	{{Prevention:~~Services~~:Seed Phrase Education}}		{{Prevention:Platforms:Seed Phrase Education}}

	~~For the full list of how to protect your funds as a financial service, check our [[~~Prevention ~~Policies For~~ Platforms~~]] guide.~~		{{Prevention:Platforms:End}}

	== Regulatory Prevention Policies ==		== Regulatory Prevention Policies ==
	{{Prevention:Regulators:Cryptocurrency Education Mandate}}		{{Prevention:Regulators:Cryptocurrency Education Mandate}}

	~~For the full list of regulatory policies that can prevent loss, check our [[~~Prevention ~~Policies For Services\|Prevention Policies For~~ Regulators~~]] guide.~~		{{Prevention:Regulators:End}}

	== References ==		== References ==

Azoundria: /* Platform Prevention Policies */

2023-03-02T17:59:57Z

Platform Prevention Policies

← Older revision		Revision as of 11:59, 2 March 2023
Line 72:		Line 72:
	{{Prevention:Services:Seed Phrase Education}}		{{Prevention:Services:Seed Phrase Education}}

	For the full list of how to protect your funds as a financial service, check our [[Prevention Policies For ~~Services~~]] guide.		For the full list of how to protect your funds as a financial service, check our [[Prevention Policies For Platforms]] guide.

	== Regulatory Prevention Policies ==		== Regulatory Prevention Policies ==

Azoundria: /* About ColonelGray */

2023-03-02T17:55:59Z

About ColonelGray

← Older revision		Revision as of 11:55, 2 March 2023
Line 11:		Line 11:
	ColonelGray is an active and enthusiastic user of the Kraken cryptocurrency exchange<ref>[https://old.reddit.com/r/CryptoCurrency/comments/10pt88x/i_simply_love_the_fact_that_two_posts_on_the/j6nee5z/ ColonelGray - "Kraken has always been fantastic for me." - Reddit] (Mar 1, 2023)</ref><ref>[https://old.reddit.com/r/CryptoCurrency/comments/slitx8/proofofreserves_audit_shows_kraken_holds_19b_in/hvsjy1d/ ColonelGray - "Kraken have always been fantastic in regards to customer support as well." - Reddit] (Mar 1, 2023)</ref> though he has also tried CoinBase<ref>[https://old.reddit.com/r/CoinBase/comments/luc4qm/veryfying_for_over_a_week/gp642q0/ ColonelGray - "I created a coinbase account over a month ago, sent off all the identification guff and it still says its under review." - Reddit] (Mar 1, 2023)</ref>. He has investments in ethereum<ref name=":9">[https://old.reddit.com/r/CryptoCurrency/comments/src111/2021_was_the_year_for_terra_luna_and_solana_what/hwrrmpc/ ColonelGray - "DOT is in a very solid spot alongside ADA." - Reddit] (Mar 1, 2023)</ref><ref name=":10">[https://old.reddit.com/r/ergonauts/comments/wv9sro/why_did_eth_move_to_pos_what_does_it_mean_to_erg/ilgs20b/ ColonelGray - "I think PoW is fantastic but from mass adoption perspective" - Reddit] (Mar 1, 2023)</ref><ref name=":11">[https://old.reddit.com/r/erg_miners/comments/q0eaok/this_coin_hopping_is_a_bummer_for_loyal_miners/hf7tte7/ ColonelGray - "Been mining ergo for months but finally gone back to eth and flux for a bit" - Reddit] (Mar 1, 2023)</ref><ref name=":12">[https://old.reddit.com/r/Ravencoin/comments/ohk9yw/deleted_by_user/h4qr7kn/ ColonelGray - "I would mine more RVN but my cards get too hot compared to ETH or ERG." - Reddit] (Mar 1, 2023)</ref>, polkadot<ref name=":9" /><ref name=":13">[https://old.reddit.com/r/CryptoCurrency/comments/qu1dob/which_crypto_are_you_most_bullish_on_even_though/hknewmh/ ColonelGray - "DOT and ERGO" - Reddit] (Mar 1, 2023)</ref><ref>[https://old.reddit.com/r/Polkadot/comments/zhqw4j/trouble_staking_with_ledger/j0yl3y1/ ColonelGray - "just looking into that now. Very helpful thank you!" - Reddit] (Mar 1, 2023)</ref>, cardano<ref name=":9" /><ref>[https://old.reddit.com/r/cardano/comments/pdmi2u/first_bank_in_us_offering_crypto_banking_and_its/hasflgl/ ColonelGray - "I still think one of the founding points of crypto is to not need banks." - Reddit] (Mar 1, 2023)</ref>, ergo<ref name=":11" /><ref name=":12" /><ref name=":13" /><ref name=":14">[https://old.reddit.com/r/Ravencoin/comments/ox7chl/deleted_by_user/h7lk3qs/ ColonelGray - "I'm hoping they will split between ergo and RVN" - Reddit] (Mar 1, 2023)</ref>, ravencoin<ref name=":12" /><ref name=":14" />, and flux<ref name=":11" />. He actively mines ethereum, ergo, and flux<ref name=":11" /><ref name=":15">[https://old.reddit.com/r/erg_miners/comments/os6hj1/finding_good_hardware_for_good_prices_is_hard_now/h6mpspy/ ColonelGray - "used to be able to pick those psus up for £15/20 now they're £40ish" - Reddit] (Mar 1, 2023)</ref> and used to mine ravencoin<ref name=":12" />. He supports Proof of Work but sees merit in Proof of Stake for adoption<ref name=":9" /><ref name=":10" />. He feels that there should be less than 15 total coins<ref>[https://old.reddit.com/r/CryptoCurrency/comments/vuaeuu/whats_your_unpopular_crypto_opinion/ifd79lj/ ColonelGray - There isn't room for more than 15-20 crypto currencies if it is ever to be taken seriously" - Reddit] (Mar 1, 2023)</ref> though has claimed to purchase meme coins at one point<ref name=":16">[https://old.reddit.com/r/CryptoCurrency/comments/rzg6i1/this_sub_2_months_ago_you_will_never_see_bitcoin/hrwbvy7/ ColonelGray - "Not going to miss out on the third memecoin shill extravaganza" - Reddit] (Mar 1, 2023)</ref>. He calls himself a "crypto peasant" and report that early in his bitcoin journey he took and stored a screenshot of his seed phrase, on his computer<ref name="reddit-8330" />.<blockquote>"Hey, I'm willing to come out admit that I was one of those idiots who [screenshot] my seedphrase. This was when I was first getting into crypto so I did not really understand just how much of an foolish move that was, despite all the massive DO NOT DO THIS TURN BACK."		ColonelGray is an active and enthusiastic user of the Kraken cryptocurrency exchange<ref>[https://old.reddit.com/r/CryptoCurrency/comments/10pt88x/i_simply_love_the_fact_that_two_posts_on_the/j6nee5z/ ColonelGray - "Kraken has always been fantastic for me." - Reddit] (Mar 1, 2023)</ref><ref>[https://old.reddit.com/r/CryptoCurrency/comments/slitx8/proofofreserves_audit_shows_kraken_holds_19b_in/hvsjy1d/ ColonelGray - "Kraken have always been fantastic in regards to customer support as well." - Reddit] (Mar 1, 2023)</ref> though he has also tried CoinBase<ref>[https://old.reddit.com/r/CoinBase/comments/luc4qm/veryfying_for_over_a_week/gp642q0/ ColonelGray - "I created a coinbase account over a month ago, sent off all the identification guff and it still says its under review." - Reddit] (Mar 1, 2023)</ref>. He has investments in ethereum<ref name=":9">[https://old.reddit.com/r/CryptoCurrency/comments/src111/2021_was_the_year_for_terra_luna_and_solana_what/hwrrmpc/ ColonelGray - "DOT is in a very solid spot alongside ADA." - Reddit] (Mar 1, 2023)</ref><ref name=":10">[https://old.reddit.com/r/ergonauts/comments/wv9sro/why_did_eth_move_to_pos_what_does_it_mean_to_erg/ilgs20b/ ColonelGray - "I think PoW is fantastic but from mass adoption perspective" - Reddit] (Mar 1, 2023)</ref><ref name=":11">[https://old.reddit.com/r/erg_miners/comments/q0eaok/this_coin_hopping_is_a_bummer_for_loyal_miners/hf7tte7/ ColonelGray - "Been mining ergo for months but finally gone back to eth and flux for a bit" - Reddit] (Mar 1, 2023)</ref><ref name=":12">[https://old.reddit.com/r/Ravencoin/comments/ohk9yw/deleted_by_user/h4qr7kn/ ColonelGray - "I would mine more RVN but my cards get too hot compared to ETH or ERG." - Reddit] (Mar 1, 2023)</ref>, polkadot<ref name=":9" /><ref name=":13">[https://old.reddit.com/r/CryptoCurrency/comments/qu1dob/which_crypto_are_you_most_bullish_on_even_though/hknewmh/ ColonelGray - "DOT and ERGO" - Reddit] (Mar 1, 2023)</ref><ref>[https://old.reddit.com/r/Polkadot/comments/zhqw4j/trouble_staking_with_ledger/j0yl3y1/ ColonelGray - "just looking into that now. Very helpful thank you!" - Reddit] (Mar 1, 2023)</ref>, cardano<ref name=":9" /><ref>[https://old.reddit.com/r/cardano/comments/pdmi2u/first_bank_in_us_offering_crypto_banking_and_its/hasflgl/ ColonelGray - "I still think one of the founding points of crypto is to not need banks." - Reddit] (Mar 1, 2023)</ref>, ergo<ref name=":11" /><ref name=":12" /><ref name=":13" /><ref name=":14">[https://old.reddit.com/r/Ravencoin/comments/ox7chl/deleted_by_user/h7lk3qs/ ColonelGray - "I'm hoping they will split between ergo and RVN" - Reddit] (Mar 1, 2023)</ref>, ravencoin<ref name=":12" /><ref name=":14" />, and flux<ref name=":11" />. He actively mines ethereum, ergo, and flux<ref name=":11" /><ref name=":15">[https://old.reddit.com/r/erg_miners/comments/os6hj1/finding_good_hardware_for_good_prices_is_hard_now/h6mpspy/ ColonelGray - "used to be able to pick those psus up for £15/20 now they're £40ish" - Reddit] (Mar 1, 2023)</ref> and used to mine ravencoin<ref name=":12" />. He supports Proof of Work but sees merit in Proof of Stake for adoption<ref name=":9" /><ref name=":10" />. He feels that there should be less than 15 total coins<ref>[https://old.reddit.com/r/CryptoCurrency/comments/vuaeuu/whats_your_unpopular_crypto_opinion/ifd79lj/ ColonelGray - There isn't room for more than 15-20 crypto currencies if it is ever to be taken seriously" - Reddit] (Mar 1, 2023)</ref> though has claimed to purchase meme coins at one point<ref name=":16">[https://old.reddit.com/r/CryptoCurrency/comments/rzg6i1/this_sub_2_months_ago_you_will_never_see_bitcoin/hrwbvy7/ ColonelGray - "Not going to miss out on the third memecoin shill extravaganza" - Reddit] (Mar 1, 2023)</ref>. He calls himself a "crypto peasant" and report that early in his bitcoin journey he took and stored a screenshot of his seed phrase, on his computer<ref name="reddit-8330" />.<blockquote>"Hey, I'm willing to come out admit that I was one of those idiots who [screenshot] my seedphrase. This was when I was first getting into crypto so I did not really understand just how much of an foolish move that was, despite all the massive DO NOT DO THIS TURN BACK."

	"Good thing I’m a crypto peasant."</blockquote>~~At the time of the theft, he~~ reports that his mother had ~~just~~ been diagnosed with cancer<ref name="reddit-8330" />.<blockquote>[M]y mother had just been diagnosed with cancer and I was planning to sell a portion of [my crypto holdings] to help cover some costs.</blockquote>		"Good thing I’m a crypto peasant."</blockquote>He reports that his mother had recently been diagnosed with cancer and he was planning to sell a portion of his cryptocurrency to help cover costs<ref name="reddit-8330" />.<blockquote>[M]y mother had just been diagnosed with cancer and I was planning to sell a portion of [my crypto holdings] to help cover some costs.</blockquote>

	== The Reality ==		== The Reality ==

Azoundria: /* Service/Platform Prevention Policies */ renamed

2023-03-02T17:54:34Z

Service/Platform Prevention Policies: renamed

← Older revision		Revision as of 11:54, 2 March 2023
Line 69:		Line 69:
	For the full list of how to protect your funds as an individual, check our [[Prevention Policies For Individuals]] guide.		For the full list of how to protect your funds as an individual, check our [[Prevention Policies For Individuals]] guide.

	== ~~Service/~~Platform Prevention Policies ==		== Platform Prevention Policies ==
	{{Prevention:Services:Seed Phrase Education}}		{{Prevention:Services:Seed Phrase Education}}

Azoundria: /* Immediate Reactions */ Minor wording changes.

2023-03-02T17:51:53Z

Immediate Reactions: Minor wording changes.

← Older revision		Revision as of 11:51, 2 March 2023
Line 43:		Line 43:

	== Immediate Reactions ==		== Immediate Reactions ==
	ColonelGray attributes his lack of taking further actions to protect his funds to his present state of grief<ref name="reddit-8330" />.<blockquote>Perhaps if I had not been so grief stricken I might have acted fast enough.</blockquote>While clearly upset, he immediately took responsibility for what happened and his actions<ref name="reddit-8330" />.<blockquote>It [nearly] threw me over the edge.		ColonelGray attributes his lack of taking further actions to protect his funds after executing the SCR file to his present state of grief<ref name="reddit-8330" />.<blockquote>Perhaps if I had not been so grief stricken I might have acted fast enough.</blockquote>While clearly upset over the loss of funds, he immediately took responsibility for what happened and his actions<ref name="reddit-8330" />.<blockquote>It [nearly] threw me over the edge.

	I felt like such a fool. I was presented with SO MANY chances to secure my crypto and I didn't even think to do one of them. </blockquote>He reports purchasing a Ledger hardware wallet, wiping his hard drive, and freshly reinstalling Windows<ref name="reddit-8330" /><ref name=":2" />.<blockquote>I immediately wiped all my drives and did a fresh install of [W]indows.		I felt like such a fool. I was presented with SO MANY chances to secure my crypto and I didn't even think to do one of them. </blockquote>He reports purchasing a Ledger hardware wallet, wiping his hard drive, and freshly reinstalling Windows<ref name="reddit-8330" /><ref name=":2" />.<blockquote>I immediately wiped all my drives and did a fresh install of [W]indows.

Azoundria: /* Service Prevention Policies */

2023-03-02T17:46:48Z

Service Prevention Policies

← Older revision		Revision as of 11:46, 2 March 2023
Line 69:		Line 69:
	For the full list of how to protect your funds as an individual, check our [[Prevention Policies For Individuals]] guide.		For the full list of how to protect your funds as an individual, check our [[Prevention Policies For Individuals]] guide.

	== Service Prevention Policies ==		== Service/Platform Prevention Policies ==
	{{Prevention:Services:Seed Phrase Education}}		{{Prevention:Services:Seed Phrase Education}}