New elements that came to light celebrity reveal the hackers who broke the blog of Mark Karpeles CEO of Mt. Gox and reveal an incredible scam. The data leaked from hackers last week, reported with documents taken from the Karpeles server that they have been stolen by hundreds of thousands of Bitcoins customers of the site.
The information leaked by the hackers at the time "proved" that Karpeles was holding duplicate "books" and that the Mt. Gox still had over 950.000 Bitcoins.
But that was just the beginning.
In data leaked in addition to the files contained some Bitcoin transactions, a biography of Karpeles, a screenshot apparently showing the exchanges' databases and some software.
Experts from Kaspersky analyzed the leaked data and found that software that was present with all the other data contained a Trojan detected by Kaspersky as Trojan.Win32.CoinStealer.i.. This malware is designed to steal files from Bitcoin computer wallet infected.
The Trojan is developed in Livecode, a programming language that can be used to create applications on multiple platforms. Cybercriminals have managed to place malicious files that work on Windows and on Mac at defaced blog
When their victims went to see the hacked and defaced blog and download the databases of Tibanne Ltd (the company that owned Mt. Gox), through the link given to them by the hackers, they also downloaded the malware. So if they had Bitcoins on their computers they would magically disappear.
Stolen information and digital coins went to a remote server in Bulgaria. Meanwhile, the server has stopped working.
It was the attack scenario. Hackers knew that many of Mt's customers. Gox want to know what happened to their Bitcoins, so they deform the CEO's blog and start blaming him.
Of course, customers were curious to see the "evidence" and so they downloaded the files. Since most deal in Bitcoins, their malware stole what they found on their computer.
