Between March and May 2023<\/strong>, three frontend development engineers of the iToken application, named Liu<\/strong>, Zhang 1<\/strong>, and Dong 2<\/strong>, conspired to implant a "backdoor"<\/em> in the iToken application package. This manipulation allowed them to illegally obtain private keys<\/strong>, mnemonic phrases<\/strong>, and other data related to users’ digital wallets.<\/p>\n They subsequently uploaded this information to a database on a preconfigured VPS server<\/strong>, associated with a specific domain name, before transferring it to a local server. Investigators discovered that 27,622 mnemonic phrases<\/strong> and 10,203 private keys<\/strong> (all de-duplicated) had been illegally collected. This data was used to generate 19,487 unique digital wallet addresses<\/strong>.<\/p>\n Liu<\/strong> was responsible for writing the logical code for the request; Zhang 1<\/strong> handled the setup of the VPS and the database, as well as the upload on the Android version of iToken; and Dong 2<\/strong> was in charge of purchasing the domain name, encrypting the users’ private keys, and uploading on the iOS version of iToken.<\/p>\n Following their arrest, the three defendants confessed to their crimes. The court ruled that they had violated state regulations by using technical means to illegally obtain data from the computer information system, which constituted a particularly serious crime.<\/p>\n Thus, Liu, Zhang 1, and Dong 2 were found guilty of illegally obtaining data from the computer information system. They were sentenced to three years in prison<\/strong> and a fine of 30,000 RMB<\/strong> each.<\/p>\n<\/blockquote>\n In addition, they are prohibited from engaging in any activities related to network security management<\/strong>, network operation<\/strong>, or any related work for three years following the completion of their sentence.<\/p>\n","protected":false},"excerpt":{"rendered":" Conspiracy and Implementation Between March and May 2023, three frontend development engineers of the iToken application, named Liu, Zhang 1, and Dong 2, conspired to implant a "backdoor" in the iToken application package. This manipulation allowed them to illegally obtain private keys, mnemonic phrases, and other data related to users’ digital wallets. They subsequently uploaded this information to a database on a preconfigured VPS server, associated with a specific domain name, before transferring it to a local server. Investigators discovered that 27,622 mnemonic phrases and 10,203 private keys (all de-duplicated) had been illegally collected. This data was used to generate<\/p>\n","protected":false},"author":3,"featured_media":3223,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[64],"tags":[65,1994],"class_list":["post-3224","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hack","tag-hack","tag-rmb"],"yoast_description":"Trois ing\u00e9nieurs d'iToken ont \u00e9t\u00e9 condamn\u00e9s \u00e0 trois ans de prison pour avoir implant\u00e9 une porte d\u00e9rob\u00e9e afin de voler des donn\u00e9es de portefeuilles de cryptomonnaie, affectant des milliers de personnes.","_links":{"self":[{"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/posts\/3224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/comments?post=3224"}],"version-history":[{"count":0,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/posts\/3224\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/media\/3223"}],"wp:attachment":[{"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/media?parent=3224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/categories?post=3224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/satoshibrother.com\/fr\/wp-json\/wp\/v2\/tags?post=3224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Roles of the Involved Parties<\/h2>\n
Legal Consequences<\/h2>\n
\n