QI Quadriga Initiative

Nov 2013 - WhiskChat Bitcoin Chatroom Data Breach - $0k (Global)

"What is a bitcoin-powered chatroom?" "It's a chatroom where you use bitcoins. Get them for chatting, tip them, donate them, withdraw them, deposit them..."

"This is a series of hacks: first WhiskChat, then CoinChat, then Inputs. :\"

"So, WhiskChat got hacked. Read my hypotheses on the hack. I'll update this with info as it comes. A database dump was posted on this account containing ALL user emails and HASHED passwords. However, hashed passwords may not be as safe as we think: I believe that this hash was used to hack into my other accounts, so change your passwords! I recommend LastPass for managing your passwords - JUST MAKE SURE YOU USE A SECURE (and I mean secure) MASTER PASSWORD! Sorry for the hack, it could happen to anyone - hopefully, it won't happen again."

"The Bitcointalk account whiskers75 was hacked. Please could theymos help recover it."

"Nope, it's not coming back. 'panama' is now DDoSing my home connection..."

Further Analysis

WhiskCoin was a bitcoin-powered chatroom created by a user named whiskers75. The site/service was breached in November 2013. The database which included usernames and hashed passwords was exposed to the attacker. Apparently the attacker also went after whiskers75 with a further DDOS attack to their home IP.

How Could This Have Been Prevented?

More Cryptocurrency Exchange Hacks/Scams/Frauds

Inputs.io Additional Lish Attack > > < < Blockchain.info Email Backup Theft

Sources/Further Reading

Inputs.io | Instant Payments, Offchain API, Secure Wallet, 235k+ BTC transferred (Mar 14)
GitHub - WhiskChat/whiskchat-server: WhiskChat! (Mar 20)
WhiskChat - open source Bitcoin-powered chatroom! : Bitcoin (Mar 20)
WhiskChat issues - YouTube (Mar 20)
WhiskChat (Mar 20)
Wayback Machine (Mar 20)
WhiskChat (Mar 20)
WhiskChat (Mar 20)
[PSA] WhiskChat Hack Analysis - CHANGE YOUR PASSWORDS IF YOU USED WHISKCHAT! (Mar 20)
https://web.archive.org/web/20131119114620/https://pastebin.com/d1Wafvab (Mar 20)
Compromised user - StarryNight · Issue #56 · WhiskChat/whiskchat-server · GitHub (Mar 20)
whiskers75 (Mar 20)
https://web.archive.org/web/20131119114620/https://&#112;astebin.com/d1Wafvab (Mar 20)


Join Us!

Name: Email:

t.me/QuadrigaInitiative /r/QuadrigaInitiative @QuadrigaInit info@quadrigainitiative.com

Sign-Ups: 100%

Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected User. For questions or enquiries, email info@quadrigainitiative.com.