DeFi Hack Recovers Stolen Funds; Blacklotus Bypasses Windows Secure Boot

Tactics, Techniques, And Procedures Executed in Collaboration Between Jump Crypto and Oasis Networks to Hack Their Own Protocol

The series of tactics, techniques, and procedures involved relies on the fact that a threat actor with access to assets from the Wormhole Bridge cyberattack in February 2022 recently transferred them into Oasis wallets in a possible consolidation or mixing move. The threat actor additionally gave permissions to an automated smart contract, which appears as normal behavior enabling additional functionality. ( …

access actor assets automated blacklotus boot bridge collaboration consolidation contract crypto cyberattack de-fi defi fact february funds hack intelligence research jump crypto malware networks oasis own permissions procedures protocol secure boot series smart smart contract stolen stolen funds tactics techniques threat threat actor wallets windows wormhole