Loading...
Market
Primary Entity Blamed for 'aiocpa' Breach by End of 2024?
2
Resolution / Starting Odds
Crypto Pay API Developers • 25%
PyPI • 25%
Telegram • 25%
Other • 25%
Cybersecurity reports and news articles
Story
Malicious 'aiocpa' Python Library Trojan Horse Exfiltrates Private Keys to Telegram Bot, 12,100 Downloads
Nov 25, 2024, 01:57 PM
A malicious update in the Python package 'aiocpa', hosted on the Python Package Index (PyPI), has been identified as a Trojan horse that targets private keys. This update was linked to the developers of the Crypto Pay API client and has reportedly been downloaded 12,100 times. The malicious code exfiltrates sensitive data to a Telegram bot, raising significant concerns in the cybersecurity community. Experts are warning users who have downloaded the package to take immediate action to secure their wallets and private keys, as the update poses a serious risk to cryptocurrency security.
View original story
Similar markets
DuoExchange • 25%
The victim • 25%
Unknown third party • 25%
No clear blame • 25%
Dark Angels • 25%
Insider within Cencora Inc. • 25%
Third-party contractor • 25%
Other • 25%
AT&T IT Department • 25%
Snowflake • 25%
External Hackers • 25%
Other • 25%
Local news outlet • 25%
National news outlet • 25%
Colorado state government • 25%
No significant issue reported • 25%
U.S. Government • 25%
Aave • 25%
External hackers • 25%
Unknown • 25%
Data Broker Involvement • 25%
Foreign Adversary Involvement • 25%
Internal Security Lapses • 25%
Cause Unidentified • 25%
BingX internal security team • 25%
Third-party security provider • 25%
Hackers • 25%
Other • 25%
TD Bank • 25%
Summit National Bank • 25%
Both equally • 25%
Neither • 25%
DMM Bitcoin • 25%
Third-party security firm • 25%
Internal employee(s) • 25%
Other • 25%
Contractor managing the databases • 25%
Illinois State Election Board • 25%
County election officials • 25%
Other • 25%
Secret Service • 25%
Local Law Enforcement • 25%
Both equally • 25%
Other • 25%