Echelon malware spreads among Telegram and Discord cryptocurrency pools, and it targets wallets like Electrum, Exodus, and Jaxx.

Hackers aim at cryptocurrency users through new malware spreading on messaging platforms like Telegram. Cybersecurity firm Safeguard Cyber raised warnings about a malware named Echelon that got programmed to steal cryptocurrency wallets.

In a report, the Division Seven (D7) threat intelligence team highlighted that a user identified as Smokes Night has been sending the malware to a group of chats about digital currencies on the Telegram platform. Some cybersecurity experts from the digital assets community took to Twitter over the weekend to alert them of the threat.

Not Only does it Spread on Telegram

The report states that malware is malicious software that infiltrates the device without consent and performs various functions such as targeting credentials, cryptographic wallets, and device details.

According to the investigation, the virus intends to steal the data to access the following crypto-wallet applications: Armory; AtomicWallet; BitcoinCore; ByteCoin; DashCore; Electrum; Exodus; Jaxx, and LitecoinCore.

Other capabilities of the Echelon version that the researchers described, in addition to the theft of credentials and data to violate crypto-wallets, is the detection of domains and digital fingerprints via the computer. The computer virus also screenshots the device, experts have warned.

On the other hand, Telegram users are not the only ones at risk, as hackers are also taking advantage of platforms to spread malicious viruses. The cybersecurity team warned that the threat could appear in messaging networks such as Discord and the email service, Outlook.

While the malware spreads across various platforms, it implies a  risk to Telegram users due to the automatic download settings built into the app. This situation means that once the malware gets received, the infected file gets automatically downloaded to the device without knowledge.

After that, victims do not need to run or close any applications, so the general recommendation for Telegram users is to disable the automatic download feature.

Hackers Look for Naive Users

The cybersecurity report did not provide details on the success of the malware in terms of user reach or volume of stolen funds. In this regard, Safeguard Cyber researchers stated that they did not consider the spread of malware on Telegram to be part of a coordinated campaign but rather targeting new or naive users of the platform.

According to the investigation, the hackers distributed Echelon in a . RAR file titled present) .rar and included three files: pass – 123.txt, a benign text document containing a password, DotNetZip.dll, a non-malicious class library, and a toolkit for manipulating. ZIP files; and Present.exe, the malicious executable that steals credentials.

Fortunately, they noted that Windows Defender detects and removes the malicious executable sample Present.exe and alerts it as #LowFI: HookwowLow, mitigating potential malware damage for users with installed antivirus software.

At the same time, digital currencies have become one of the hackers’ favorite targets to generate profits quickly. According to another recent study, hackers extracted more than $ 1 billion worth of cryptocurrencies during the third quarter of 2021.

By: Jenson Nuñez

According to authorities, bitcoin mining is struggling with electricity in winter. The government desires to reduce the fuel consumption of power plants.

Bitcoin mining in Iran gets affected again in 2021. The authorities advised that operations in the farms that legally work in that country must stop because of the arrival of winter.

The measure took effect because, according to the authorities, mining activity has caused power outages. According to Mustafa Rajabi Mashhadi, a spokesman for the electricity industry, the decision is to reduce the oil consumption in power plants.

The official reported that temperatures would decrease in the coming days; This situation means an increase in gas consumption. According to what he explained, this action may limit fuel supply to power plants.

From November to March, the temperature crumbles down in Iran, but the authorities are preparing for January, the coldest month of the year. In this period, temperatures can drop to an average minimum of 1 ° C and a maximum of 8 ° C. This situation encourages the use of heating and, therefore, impacts the electricity supply that also includes the bitcoin mining farms.

The new pause for Bitcoin miners comes after, last October; the Persian authorities lifted the previous veto after four months of inactivity. The miners had to stop operations due to the constant power outages and the prolonged drought that the country experienced; the increase in energy demand due to the summer was also a reason for the miners to stop their activities.

They Keep Installing Bitcoin Mining Farms

Despite the struggles with the electricity supply that Iran went through over the year, the country has already installed a considerable number of Bitcoin mining farms. Last June, that country granted licenses to at least 30 mining farms in diverse provinces of the Persian nation to start their activities.

However, the message that Iran sends can get interpreted as an unstable country that cannot produce bitcoin since the transmission of electrical energy will depend on the seasons of the year.

Temporary Bitcoin Mining Ban in Iran

Iran’s action took effect just when last May they temporarily banned, until September of this year, Bitcoin mining due to the power outages that they had experienced that month, as reported by this medium.

According to the government, digital mining was interfering with the national electricity system. The energy deficit would also be a consequence of the prolonged drought in the country and the increase in energy demand during the summer.

Hassan Rouhani Wants Regulations for Bitcoin

Another of Iran’s decisions to control the bitcoin market in Persian territory was announced by the president of that country, Hassan Rouhani.

Rouhani asked his government cabinet to execute measures to regulate bitcoin and cryptocurrency trading. These measures were born because he considers it necessary to preserve and protect the national interests of his country against the digital assets’ expansive approach.

By Jenson Rivas

BIP-119 proposes automated transactions with spending parameters. The author suggests an activation route similar to that of Taproot.

The BIP-119, the initiative that would become Bitcoin’s next famous update, already counts on a possible roadmap for its activation in 2022. Jeremy Rubin, BIP-119’s creator, consolidated an activation roadmap that guards many similarities with the one that took effect this year for the activation of Taproot, which occurred on November 2021. The new proposal would arrive with the soft fork in November of next year.

The BIP-119 reveals a “covenant” that allows defining how bitcoins (BTC) can get spent. The covenant in question bears the name “OP_CHECKTEMPLATEVERIFY or OP_CTV” and consists of a template or spending scheme of some currencies’ overtime.

During 2020 media outlets highlighted the possibilities this agreement would offer to carry out transactions in batch or function in an automated way as a smart contract in Bitcoin. Additionally, a programming language named Sapio got presented, which according to Rubin, turns out to be useful for displaying various types of transactions and practical concepts with OP_CTV.

In a report revealed on December 24, Rubin highlighted what the activation roadmap of the BIP-119 would be like other considerations and variables that would get specified or changed over time. The BIP-119 is a soft fork, making it unable to break the Bitcoin consensus or to need many drastic changes to get implemented on its software and its protocol.

Rubin recognizes that this activation route is similar to that of Taproot. This activation includes the participation and signal of miners such as the Speedy Trial.

Developers Support this Proposal in Bitcoin

This proposal also highlights that the BIP-119 receives the assistance of various developers and personalities of the bitcoin and cryptocurrency ecosystem.

Developers like Ben Carman (The Bitcoin Company), Bryan Bishop (BitMEX scholarship holder), Charlie Lee, creator of Litecoin; FluffyPony, former Monero developer; Olaoluwa Osuntokun, Head of Technology at Lightning Labs; are amongst the list of supporters of this activation.

The BIP-119 also received supportive stance from two mining pools: F2Pool and Luxor Tech, and companies like lightning Labs, Muun Wallet, Breez, and others.

Jeremy Rubin became the most prolific developer of the Taproot implementation in Bitcoin. However, Rubin recognizes that BIP-119 and its proposed activation is not final; It means it does not have the pretension to be official.

Jeremy Rubin, developer and author of BIP-119. said this document does not represent an official roadmap, narrative, or priority. However, Rubin said this document is just his vision about the most pragmatic way to update Bitcoin. He bases this update on a misunderstanding of some other proposals and their interactions.

However, this proposal got ranked as one of the most advanced and perhaps accepted to implement in Bitcoin, and its activation could become effective in 2022.

By: Jenson Nuñez

The update will be available for IDEs like Qt Creators and VIM. The service is not yet available for VS Code.

The new version of Ethereum and its new native programming language, Solidity, has come. This time it brings with it little improvements at the language level. However, it includes a new feature that will allow programming from any development environment (IDE).

The new version got revealed on December 20 through the official Solidity blog, where the list of changes and fixed bugs that this new version of the Ethereum programming language will have is exposed.

The main change intends to add Solidity to different IDEs, such as Qt Creator or VIM. The integration makes developer tools such as compilers, documentation and even autocompletes easier to manage when programming in the IDE on Solidity. Those users interested are now able to enter the official blog to know the particular installation according to the IDE.

As the release note explains, Microsoft VS Code, one of the most used IDEs nowadays, does not have LSP support for Solidity syntax autocompletion. This IDE is still waiting for these features to get added shortly.

Likewise, those who desire to use this new tool known as the Language Server Protocol must download the native binaries of the language from the official GitHub. For those applying the Solidity instance via JavaScript NPM, LSP is still unavailable.

Language Level Improvements

In addition to improvements at the level of compatibility with programming environments, the Solidity developers have also created a simple modification that aims at optimizing the use of the compiler named abi.encodeCall. This modification allows a faster verification of the data, in clear contrast with the one used previously, abi.encodeWithSelector.

Since the environment considers this situation a minor improvement, only an optimization got discussed in the compiler. When Ethereum starts working on a virtual machine distributed throughout the blockchain, known as EVM (Ethereum virtual machine), that a code presents flaws in its optimizations, and it can mean operating costs that translate into increases in commissions.

Ethereum made its appearance in summer 2015 with the sole intention of expanding the use cases of blockchain and cryptocurrency to encircle all manner of decentralized applications beyond Bitcoin’s initial scope. These procedures went from permissionless financial services and crowdfunding to new organizational archetypes.

Ethereum was in principle a global computer that would allow developers to execute apps with the support of smart contracts and programmable scripts that could make the flow of digital assets way easier.

Ethereum’s native cryptocurrency, Ether (ETH), not only brings an incentive archetype and structure in parallel with Bitcoin (BTC) when it comes to maintaining and securing the network, it also gets applied as gas to execute transactions through smart contracts. This primary feature also serves as a security procedure to protect the network from inefficient code and attacks by malicious entities.

By: Jenson Nuñez

The report issued by the Reserve Bank of India details that they all agree with launching a CBDC, as long as it contemplates functions and gets inserted in the payment systems managed in the country.

The Reserve Bank of India (RBI), the first institution that governs the monetary and financial guidelines of the country, proposes that before implementing a sophisticated digital currency backed by the entity (CBDC), it is the first option to test with a that has a more basic feature.

The position of the RBI got reflected in its report presented today entitled Trend and progress of banking in India 2020 – 21. The entity shared its considerations on a CBDC, showing an open stance about the idea, even though historically it has been against more traditional digital currencies.

In this sense, the RBI advocated a first basic implementation, which could get comprehensively tested to have a minimal impact on monetary policies and on the banking system that governs the country. Therefore, the idea is to create a space within the already consolidated backbone in terms of payments for this type of asset to fit perfectly and be more beneficial for residents and financial institutions.

Two Types of CBDC for India

The most striking aspect of the report is that the RBI would propose the creation of at least two CBDCs with different properties, which could get intended for c times.

RBI Deputy Director Rabi Shankar highlighted that one of them would be a CBDC for wholesale use (CBDC-W), which intends to reach one audience and another of a retail type (CBDC-R) designed for residents.

Concerning the latter, the director pointed out that the CBDC designed at the retail level could be a more complicated situation because it addresses extra considerations and needs better thinking about some dynamics.

In any case, Shankar made it clear that neither of the two is ready for now, so once they get finished, they will be launched in the testing phase to evaluate the receptivity and the corresponding use.

This announcement comes amid tensions in India regarding the use and commercialization of cryptocurrencies. There is currently a bill in progress to regulate these assets, although this has not been made public, and the considerations outlined there are unknown.

Crypto Must Get Blocked

Among the opponents against cryptocurrencies, the most recent is the Minister of State for Foreign Affairs, Meenakshi Lekni. He has said that cryptocurrencies should get blocked if used for illegal purposes, such as launching cyberattacks in India, launching other attacks against India, carrying out different types of shady work such as drug trafficking.

This position appeared to the public right after the Indian government agreed to add new changes to the crypto bill. The ministry added that he is pretty sure that the Ministry of Finance and the Ministry of Information Technology would have thoroughly examined these aspects.

By: Jenson Nuñez

The stacking needs to get 32 ETH blocked and thus become a validator. The pools allow staking with amounts much less than the 32 ETH required.

The staking of Ethereum 2.0 is creating a particular behavior: More than 60% of the validators are unknown users.

According to data provided by the Beaconcha to the portal, which collects information related to the Ethereum 2.0 network, more than 176 thousand user addresses are working as independent validators (not linked to a staking pool), which means at least 64% of the total percentage of the network.

Pools like Kraken or Lido own at least 11.09% of the entire set of validators. To become a particular ‘miner,’ 32 ETH must get blocked until Ethereum 2.0 is fully operational, which might happen in 2023.

Each validator must have this amount to validate transactions on the network. This figure amounts to more than USD 120 thousand and is not accessible to most users.

Validator pools like Kraken, Binance, among others, allow users to invest in Ethereum 2.0 staking without blocking a high amount of money or waiting for the network to go live to withdraw their profits. The latter only applies in pools like Binance and Lido, since other pools do not allow the withdrawal of liquidity while ETH 2.0 is not active.

Pools such as Lido and Binance charge 10% of commissions to the total invested funds, which counts on a minimum limit of 0.1 ETH, approximately USD 400. The returns, currently, are around 5% per year.

Despite the facilities that these pools currently bring, they have not yet achieved a good share, as most remain anonymous validators.

Unknown Validators, but not Necessarily Independent

With 64% of total validators controlled by unknown users, there is a general assumption that these are independent. However, nothing prevents that all these could fall under the control of a single entity.

To collect the data, Beaconcha. Do a check on the Ethereum profiles that are active in staking. It counts each profile individually, of which it is impossible to know who is the owner of each one if it does not declare it publicly.

If the total of 64% (or, at least, 51%) were at a single entity’s hands, the network could enter into conflict. It could make decisions about the other validators, totally compromising the reliability of the net.

This type of scenario received various critics from Hugo Nguyen, who recently spoke about the centralization that Ethereum would face. According to that specialist, the co-creator of Ethereum Vitalik Buterin and other programmers took these problems too lightly.

Ethereum 2.0 network is not fully operational yet, which means that new validators would probably get added over the months. The number of validators has increased exponentially by more than 1,000% this last year. This growth can get perceived as a true sign of decentralization.

By: Jenson Nuñez