Thursday, December 2, 2021

Mobile crypto ‘mining’ app possibly connected to personal data leak


Related articles

Disclaimer: This text has been up to date to incorporate feedback from the Pi Community, which claims that no Vietnamese identification playing cards had been held on its servers.

Pi Community, a cryptocurrency mining app for cellular customers, might have been related to 17GB value of non-public knowledge leaks, a Vietnamese information outlet reported on Monday.

The treasure trove of non-public knowledge was apparently taken from the Know Your Buyer checks of customers of Pi Community, in line with the one that posted it to hacker hangout RaidForums on Thursday.

The identification playing cards of an estimated 10,000 Vietnamese residents had been positioned on the market, together with related residence addresses, telephone numbers and electronic mail addresses. The vendor positioned a price ticket of $9,000 on the info, payable in both Bitcoin (BTC) or Litecoin (LTC).

Phien Vo, a moderator of a Vietnamese Pi Community group chat channel, told VnExpress that Pi Community’s KYC checks are carried out by a 3rd get together, including that Vietnamese identification playing cards like these in query aren’t appropriate with the app. Nevertheless, Vo did point out that an older model of the app was appropriate with the playing cards at one level.

“To carry out KYC verification on Pi Community, Vietnamese would want to make use of their passports. Just some customers who used earlier variations of Pi might carry out KYC verification utilizing their driver licenses, however thus far the system has but to simply accept Vietnamese identification playing cards,” Vo mentioned.

Vietnam’s Ministry of Public Safety’s cybersecurity division has since launched an investigation into the matter.

An impartial investigation into Pi Community’s perceived worth was lately conducted by Cem Dilmegani, a tech entrepreneur and founding father of AIMultiple. Written weeks previous to the current knowledge leak, the assessment concluded that Pi Community bore the hallmarks of a multilevel advertising scheme, or an internet affiliate marketing program.

The Pi app reportedly calls for customers log in each day and click on a button to obtain their PI cash. No blockchain consensus algorithm, like proof-of-work or proof-of-stake, is used within the app, and customers can achieve elevated mining charges by referring different individuals. The PI token isn’t but traded on exchanges and has no greenback worth.

The app reportedly sells knowledge for promoting income from the second its utilization begins. On condition that advert house can promote for a better worth with private person information included, many have been led to invest that the Pi app is designed solely to siphon personally figuring out info from its customers.

Cointelegraph reached out to a Pi Community spokesperson for remark. Justin Wu, of Pi Community’s advertising and progress group, reiterated that the app’s KYC was carried out by a 3rd get together, and that no Vietnamese identification playing cards had been held on Pi Community’s servers. Wu added that an inside examine didn’t uncover any proof of a knowledge leak. Wu mentioned Pi Community’s referral program was like others within the cryptocurrency house, and is barely meant to incentivize the participation of household and buddies.