After BitKEEp Hacking, Kevin Como Believes Private Key Users Are Still Hacked
JAKARTA - According to a letter posted by China's blockchain news publisher, Odaily.com, on December 27, Kevin Como, BitKeep's anonymous CEO, warned that users' personal keys were still risky after a security incident occurred on December 26 resulting in losses of more than US$13 million (Rp203 billion).
BitKep is one of the most popular non-custodial financial multichain wallets with more than 6 million users.
This is a huge and terrible hacker attack incident. The APK 7.2.9 (Android Package Kit) installation package was hijacked and exchanged by hackers, and as a result, some users have installed the APK planted with malware by hackers, which causes the user's private key leakage, Como wrote, as quoted by Cointelegraph.
Como urges users who have downloaded Android APK 7.2.9. to transfer their digital assets to a new wallet. "The possibility [this wallet] has leaked its personal key," wrote the crypto executive.
In terms of progress, Como explained that the BitKEEp team had contacted blockchain security firms, such as SlowMist, to track the stolen funds. We have actively gathered information about stolen assets of users, created complete memories of hacking procedures and timelines, and have collected evidence of Android malware 7.2.9 APK," Como said.
The analytical firm of the OKLink Web3 data first reported that the attacker created several fake BitKeep websites containing APK files that looked like versions of 7.2.9 from the BitKEEp wallet. Users who download and interact with malicious files then their private key or initial words are stolen and sent to the attacker.