LocalBitcoins, a popular platform for the physical purchase and sale of bitcoins, confirmed that it had undergone a phishing attack, as a result of which at least six of its users lost their funds. In total, 7.95205862 BTC was stolen from them (about $ 28,000).

A LocalBitcoins message on Reddit says that around 10:00 UTC on Saturday, January 26, Exchange employees discovered a security vulnerability that resulted in "an unauthorized source could access a number of accounts and use them to send transactions."

LocalBitcoins' report on the security vulnerability 01/26/2019 https://t.co/HD3MrbEXbl via @reddit

– LocalBitcoins.com (@LocalBitcoins) January 26, 2019

LocalBitcoins representatives said they were able to identify the problem and stop the attack. It is alleged that it was associated with the function provided by third-party software — as a result, a phishing link was posted on the platform forum.

As one of the users of Reddit explains , when you visit the LocalBitcoins forum, you were redirected to a phishing page, where you were asked to re-enter your login information, including the 2FA code. As a result, hackers were able to empty even protected accounts.

The panelists also identified the address at which the stolen funds arrived. As the blockchain data shows, a total of five transfers were made to it, after which the funds from this address were withdrawn.

Additional comments from LocalBitcoins have not yet been received, but the possibility of posting new posts on the forum is still disabled for security reasons.

Recall that at the end of 2018, users often complained about the problems in the work of the LocalBitcoins website, which at some point even forced the company to go for maintenance .

Subscribe to the BlockchainJournal news in Telegram: BlockchainJournal Live – the entire news feed, BlockchainJournal – the most important news and polls.