Three employees of cybersecurity company 360 were sentenced for stealing others' virtual currency, with total profits exceeding 2.5 million

ChainCatcher news, three employees of the cybersecurity company 360 were sentenced for stealing others' virtual currency, with total profits exceeding 2.5 million yuan. The Xuhui District People's Procuratorate of Shanghai accused that from February 9 to 20, 2023, Hong, in collaboration with Yang and Zhang (both handled in separate cases), exploited the Yapi remote code execution vulnerability to gain access to the target virtual currency website. They then controlled the internal network servers through lateral penetration and trojan implantation, found the server source code, and downloaded and analyzed the victim Su's virtual wallet address, private key, etc., and constructed false commands to transfer the virtual currency from the victim's wallet address. Subsequently, they exchanged it for other virtual currencies and sold it, obtaining illegal gains totaling over 2.5 million yuan.