Bitcoin Scam Targets Mt. Gox Stolen Funds Worth Over $8 Billion
Security researchers have warned of an active phishing campaign targeting an old Bitcoin address holding over $8 billion in BTC, according to threat intelligence from BitMEX Research.
In the most recent incident, threat actors sent an OP_RETURN transaction to the affected wallet, embedding text that appears to point to a website claiming to be affiliated with the defunct investment bank “Salomon Brothers.”
Researchers noted that the transaction contains text leading the target toward a page stating: “This digital wallet appears to be lost or abandoned. Our client has taken constructive possession of it and is seeking to determine if there is a bona fide owner.”
Technical Details
- The specific Bitcoin address being targeted—1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF—was originally created in 2011 and received 79,956 BTC stolen from Mt. Gox following its first major hack
- The theft was part of a series of attacks that ultimately compromised approximately 611,000 BTC from the exchange
- Hackers exploited an OP_RETURN transaction to embed a misleading URL in the immutable Bitcoin blockchain
The website that appears when following the embedded link explicitly claims constructive possession of abandoned wallets and attempts to extract personal information from potential owners.
Historical Context
The stolen Mt. Gox Bitcoin has been largely dormant for over a decade since the exchange’s collapse following multiple security breaches starting in 2011.
As reported, the owners of several affected 2011-era addresses continue to exist. Mt. Gox subsequently filed for bankruptcy and liquidation after losing approximately $457 million USD to cyber thieves since being hacked for the first time in July 2011.
While part of Mt. Gox’s assets have been returned through legal proceedings, hundreds of millions remain unaccounted for and are sitting inactive in various wallet addresses.
“The website appears illegitimate and is part of an ongoing Bitcoin scam,” commented BitMEX Research, noting that the attack specifically targets the wallets receiving stolen cryptocurrency.
The sophisticated nature of the attack demonstrates continued targeting of dormant cryptocurrency assets following high-profile thefts. Security experts advise wallet holders to remain vigilant against social engineering tactics and phishing attempts on blockchain networks.
At present, there is no indication law enforcement agencies are actively investigating this specific incident, though BitMEX Research has alerted the cybersecurity community to the threat.
