The hackers who hacked the crypto game Axie Infinity were able to steal money by infecting the computer of one of the engineers with a virus. Malicious software turned out to be inside an offer from a fictitious company, writes The Block, citing sources.
Job offers were sent to employees of Sky Mavis, which develops Axie Infinity. They came on behalf of a fake company via LinkedIn. One of the engineers was interested, and after several rounds of interviews, he was offered the job with an "extremely generous compensation package."
The "offer" was sent as a PDF document. When the engineer downloaded it and opened it, spyware infiltrated the Ronin's systems. From there, the hackers were able to attack and capture four of the nine validators protecting the network.
The attackers gained access to the fifth validator through the Axie DAO, a decentralized autonomous organization created to support the gaming ecosystem. This was enough to withdraw the money.
In March, hackers attacked the Ronin sidechain, which is used in the game Axie Infinity, and stole about $625 million in cryptocurrency. The US government later blamed the North Korean hacker group Lazarus for this.
Axie Infinity is a mobile game where users can breed pets, take care of them, participate in battles; animalso be traded using blockchain technology. To reduce the percentage of deductions for transactions with Ethereum, the Ronin subsystem was just used.
bbabo.Net