Lessons-Learned-from-64-Million-Dollar-Cryptocurrency-Hack-Case-Study.pdf (3 MB)

The LIFARS case study describes a $67 million cryptocurrency-mining marketplace theft ultimately linked to Hidden Cobra. The initial intrusion used social engineering that impersonated a company system engineer and mimicked a Google Docs weekly-report invitation sent through an anonymous email service. The attack defeated SPF controls and exploited common startup security weaknesses rather than relying on highly advanced malware. The case highlights credential and cloud-workflow abuse, business-process trust, and rapid operational execution in a large cryptocurrency theft.