Hackers have hijacked the DNS server for BlackWallet, an online wallet for Stellar Lumens (XLM), and has stolen about 669,920 Lumens amounting to about $413.000 according to the current rate.
The attack reportedly took place on 13 January after hackers managed to hijack its DNS server, change the settings and redirect it towards their own third-party server.
BlackWallet was compromised today after someone accessed my hosting provider account. He then changed the DNS settings to those of its fraudulent website which was a copy of BlackWallet.
The creator of BlackWallet said in a statement on Reddit
Many users have taken to social media, Reddit, Stellar and other cryptocurrency forums to warn others against logging into the compromised website and having their funds vanish from their wallets.
BlackWallet administrators have also been trying to contact Bittrex to block the hackers' account.
Hello @BittrexExchange , please block the account with MEMO XLM 27f9a3e4d954449da04, he hacked https://t.co/ooPMtN2HV4 and is now sending all the funds to your exchange! This is URGENT! A lot of money is involved (>$300,000) https://t.co/nH1MnpPeyw https://t.co/3NlQ01m1yV
— orbit84 (@orbit0x54) January 14, 2018
In early December, cryptocurrency mining marketplace NiceHash said its payment system was compromised and its entire bitcoin wallet was drained by hackers.