Bitcoin Gold issued a critical alert that someone has gained access to the Github repository replaced the compiled Windows file with a different one.
Bitcoin Gold issued acritical alert that someone has gained access to the Github repository replaced the compiled Windows file with a different one.The suspicious files were served through the link on their download page and the file downloads on their Github release page between November 21, 2017, 09:39 UTC, and November 25, 2017, 22:30 UTC. Both the suspicious files does not match the publicly posted SHA-256 checksum, and the origin of the file is still unknown.“If the file was used, the computer on which it was used should be addressed with extreme caution; the file should be deleted, the machine should be thoroughly checked for malware and viruses (or wiped clean), and any cryptocurrencies with wallets accessible on that machine should be moved to new wallet addresses immediately.”Even though the suspicious files were not detected by any antivirus/anti-malware software users are requested not to presume the files are safe.“Any user who verified the SHA-256 checksum of the download against the checksum listed on our Download pages is already aware the file is not authentic and should not have used the file, but nobody should assume that all users take this important step,” said in the post published by Bitcoin gold.
You may be interested in reading: Terdot - Zeus Banking Trojan Targets Social Media & EmailThe source code was not changed so the users who downloaded the source code to compile it themselves should be unaffected. Users should ensure that their local repository matches the current Github repo and take extreme caution.The GitHub repository has been secured now, and the suspicious files were replaced with a known safe file which matches SHA-356 checksum.User are advised to check always whether the SHA-256 checksum against your downloaded files.Our team will update you more on this issue as we receive more information about it.
Read more on: MuddyWater: Hackers Target Middle East Nations