An anonymous user posted an ad on the forum about selling access to Binance’s law enforcement request panel. The attacker is asking for $10,000 in crypto for such a loophole.
An unknown hacker put for sale access to the law enforcement request panel of the crypto exchange Binance. According to the posts on the forum, the buyer was already found and transferred a part of the funds to the seller.
The law enforcement panel provides access to any sensitive information stored on the crypto exchange in response to requests from regulators. A response to a request through this panel comes within 3-7 days. The personal information of the exchange’s users — email addresses, phone numbers, documents, and even transaction IDs or wallets — can also be accessed through the panel.
The hacker requested $10,000 for access, asking to pay the amount in Bitcoin (BTC) or Monero (XMR). The seller confirmed their reputation with previous successful deals to sell access to other resources.
According to Hudson Rock research, the hacker gained access to Binance’s sensitive information through a third-party service called Kodex, which is used by the exchange to verify law enforcement requests. The hackers managed to spread Infostealers malware and compromised three accounts belonging to officers from the Taiwanese Criminal Investigation Bureau (CIB), the Uganda Police Force (UPF), and the Anti-Cybercrime Group (ACG) of the Philippine National Police (PNP).
Binance representatives didn’t give any comment on the situation.
Recently, Binance reached an agreement with the U.S. Department of Justice, committing to provide local authorities with access to all documentation, information, and data of the company upon request.
