Experts have found a trojan able to rig online live betting platforms

Summary

A trojan named Newtonsoftt.Json.Net, disguised as a legitimate software library, targeted Digitain's crash-game backend. This malware rigged game outcomes by manipulating results based on date and time, allowing attackers to bet strategically. JFrog researchers discovered the exploit, noting it likely required insider knowledge of Digitain's codebase. Digitain has since fixed the vulnerability.

Key Takeaways

1. JFrog discovered a trojan NuGet package, Newtonsoftt.Json.Net, mimicking a popular .NET library to target Digitain's crash-game backend.
2. The malware rigged game outcomes using a formula based on the date and time, allowing attackers to know manipulated rounds in advance.
3. Researchers believe the exploit required insider knowledge of Digitain's codebase, suggesting a current or former employee or contractor as the likely attacker.

Statement Breakdown

• Claimed Facts: 60% of statements the article presents as facts
• Opinions: 20% of statements classified as editorial or subjective
• Claims: 20% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article presents technical details about a cybersecurity threat with clear attribution to a security research firm. It avoids sensationalism and focuses on factual reporting of the discovered malware and its impact. However, the lack of direct quotes from the targeted company and the unidentified nature of the attackers slightly temper the overall credibility.

Bias assessment: Tech-Focused Security Reporting. The article's perspective is primarily that of a security researcher reporting on a technical vulnerability. It prioritizes the technical aspects of the malware and its discovery over broader implications or opinions. The language is objective and informative, focusing on the 'what' and 'how' of the security incident.

Note: This article provides a technical analysis of a cybersecurity threat. While based on findings from security researchers, the attackers remain unidentified, and some details about the exploit's implementation are inferred.

Credibility flag: Technical Analysis

Claimed Facts (7)

• This is a direct statement of fact about the discovery of the malware.
• This states the specific target and method of the malware.
• This provides factual context about the legitimate software library.
• This is a factual description of the company Digitain.
• This describes the technical process of how the malware rigged the game.
• This details an additional function of the malware.
• This provides a timeline of the discovery and resolution of the issue.

Opinions (1)

• This is an inference and a strong assertion about the attacker's identity, presented as a likely scenario rather than a confirmed fact.

Claims (1)

• While the article states JFrog stressed this, the claim of 'most likely an insider' is an interpretation and not a definitively proven fact, especially since the attackers remain unidentified.

Key Sources

• JFrog — Security Research Firm
• Digitain — Online Betting Software Company