3 ms·
You don't need to steal crypto wallets and credit card info in a pentest because it's a crime. Unless you argue some companies store crypto wallets and credit c
by _8j50 3y ago
You don't need to steal crypto wallets and credit card info in a pentest because it's a crime. Unless you argue some companies store crypto wallets and credit card info that belong to the company on computers and that is why all these people are writing stealers? Lol
- hutzlibu 3y agoBut you can include such attacks, to see if it really works. But sure, that is more of a theoretical point.
- _8j50 3y agoBut breaking the law can never be part of the rules of engagement when the company doesn't have authority to give you permission to do something (take an employees financial property).
- hutzlibu 3y agoCompany laptops can also have discord or (more rarely) crypto accounts and a succesful(or unseccesful) pentesting would be taking them over.
- smoyer 3y agoIs it a crime to steal a crypto wallet. Razzlekhan and hubby were convicted of money laundering with the latter also being charged with hacking BitFinex.
- _8j50 3y agoCrypto has financial value, taking something of value that belongs to others is theft.
- smoyer 3y agoI'm not sure the legal system is ready for charging for crypto "theft". What if the unimaginable happens and there's a private key collision that results in two owners ... If they both use the account without noticing the other but one eventually closes the account, is that still theft? It's pretty clear when an account or computer is hacked and yet neither razz or hubby were charged with theft ... Hubby essentially got convicted of tax evasion like a '30s gangster.
- _8j50 3y agoYou'd be surprised. The law isn't rigid like computer code . The intent and mindset of the defendant is all that gets prosecuted. If you can convince the jury the perp intended to gain money by accessing that information, it could be a spreadsheet for all they care. It is both theft and a violation of CFAA.
- smoyer 3y agoIANAL