Digital Asset
Intelligence
Security Incident · Exchange

ONUS Ransomware

·Historical incident record

Incident Overview

The payment system of ONUS, the largest cryptocurrency trading platform in Vietnam, running a vulnerable version of Log4j suffered a cyber attack. Cyclos notified ONUS to repair the system on December 13, but it was too late. Although ONUS has fixed the security loopholes in the Cyclos instance, the window of loopholes allowed attackers to successfully steal data from sensitive databases. The stolen database contained nearly 2 million user data, including KYC (Know Your Customer) data, hashed passwords, etc. Subsequently, the attacker asked ONUS to pay a ransom of 5 million, otherwise the stolen data would be made public. On December 25, because ONUS did not pay the full ransom, the attackers sold customer data on the dark web data exchange market.

Sources & References

Original incident referencehttps://cystack.net/research/the-attack-on-onus-a-real-life-case-of-the-log4shell-vulnerability (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    dYdX

    Attack methodContract Vulnerability
    Reported loss$ 211,000
  2. Incident date
    Attack methodGovernance Attack
    Reported loss$ 30,000,000
  3. Incident date
    Target

    Robinhood

    Attack methodInformation Leakage
    Reported lossNot disclosed
  4. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 744,000
  5. Incident date
    Target

    PIZZA

    Attack methodContract Vulnerability
    Reported loss$ 500,000