Chainalysis breached via 'offensive agentic techniques': password hashes and live tokens for all users exposed, accounts locked, key products offline

Linha do tempo

1. bleepingcomputer.com ↗ · pub. 06/11/2026 11:17 · coletado 06/11 12:00

   Chainalysis breach exposes usernames, password hashes and live tokens for all customers; login portal and products taken offline

   ler a análise desta fonte ocultar

   Chainalysis, a blockchain intelligence vendor whose customers include law enforcement, government agencies, financial institutions and crypto businesses, says an attack on its systems and internal tools exposed customer data. The exposed data covers names, usernames, password hashes and live tokens for all users. The company first said the impact was limited to non-sensitive identity metadata (names, emails, user IDs, role labels) and described the attackers as using "offensive agentic techniques" with AI tools. Later updates said the data was exposed in an "on-path attack" (MITM). Chainalysis says it has no evidence that investigations data was accessed or that its attribution data was manipulated.

   Technical Details

   • Chainalysis disclosed the first incident last Friday. On Monday it found that credentials and live tokens for all users were exposed (bleepingcomputer.com).
   • After finding further abnormal activity, it took the login portal offline. It did the same for Reactor, Data Solutions, the KYT user interface and API, and address screening products (bleepingcomputer.com).
   • The article does not name an attacker or give IOCs.

   Remediation

   • Customers must send trusted IP addresses to [email protected] or their account team to be added to the allowlist.
   • Once access is granted, every user must reset their password and rotate API keys before registering transactions (bleepingcomputer.com).
2. thehackernews.com ↗ · pub. 06/11/2026 05:04 · coletado 06/11 06:00

   Chainalysis breach exposed all users' credentials and live tokens; key services offline amid wave of ARTEX agentic AI attacks

   The article adds that Chainalysis locked the impacted accounts and cannot currently process password resets. It says the on-path vector exposed a subset of customer passwords and has been addressed. It also adds a restoration procedure based on IP allowlisting. Beyond Chainalysis, it covers other ARTEX-linked victims (Chainstack, OpenCode, Warp, WorkOS), Microsoft's findings on agentic GitHub secret scanning with IPs 199.19.77[.]84 and 199.19.77[.]18, and Google and Wiz reporting on LLMjacking resale infrastructure.

   ler a análise desta fonte ocultar

   The article adds that Chainalysis locked the impacted accounts and cannot currently process password resets. It says the on-path vector exposed a subset of customer passwords and has been addressed. It also adds a restoration procedure based on IP allowlisting. Beyond Chainalysis, it covers other ARTEX-linked victims (Chainstack, OpenCode, Warp, WorkOS), Microsoft's findings on agentic GitHub secret scanning with IPs 199.19.77[.]84 and 199.19.77[.]18, and Google and Wiz reporting on LLMjacking resale infrastructure.

   Chainalysis said its investigation into an agentic cyber attack found that names, usernames, password hashes and live tokens for all users were exposed. It removed access to Reactor and Data Solutions and took the KYT user interface and API, other address screening products and the login page offline. The company still has no evidence that investigations data was accessed or that attribution data was manipulated. It says the "on-path attack" vector exposed a subset of customer passwords and has since been addressed. No perpetrator is named, but Chainalysis says the attack resembles those on many other tech platforms in recent weeks.

   The article also covers a wider wave of AI-driven attacks. Chainstack, OpenCode, Warp and WorkOS have disclosed attacks, some involving the autonomous penetration testing tool ARTEX.

   Technical Details

   • Chainalysis locked the impacted accounts as a precaution. Password resets are not possible for now, even for customers who just received a reset email. Users should change reused passwords on other systems (thehackernews.com).
   • Microsoft reports a campaign, assessed as ongoing since August 2026, in which an agentic AI framework such as ARTEX scans public GitHub repositories for exposed secrets (credentials, application credentials, AI inference API keys). In at least one case an agent went from GitHub secret scanning to exfiltrating Azure Key Vault data in five minutes (thehackernews.com, citing Microsoft).
   • The agents signed in as service principals on dozens of applications across multiple tenants. They targeted operations that return storage account keys, App Service settings, connection strings, publishing credentials, AI/ML connections and AKS credentials, and then accessed SharePoint, OneDrive and mailbox items. They also obtained single-tenant OAuth application tokens to enumerate cloud resources (thehackernews.com).
   • Sign-in IPs named by Microsoft: 199.19.77[.]84 and 199.19.77[.]18.
   • Google and Wiz describe LLMjacking resale. "LLM Mixers" resell access to stolen enterprise LLM accounts. Wiz identified two resale sites using stolen AWS Bedrock keys: llm-routing[.]com and xingjiabiapi[.]org. The IP 23.106.46[.]239, tied to llm-routing[.]com, hosted an Artex landing page in mid-October 2026 and was flagged by Zeabur as an IOC. There is no evidence that these site operators carried out the initial compromises. Zeabur disclosed a breach in which plaintext credentials were exploited and over 3.2 million environment variable records and data on 321,810 accounts were taken.

   Remediation

   • Chainalysis plans to restore KYT and Address Screening. Customers must send trusted IP addresses to [email protected] or their account team for an allowlist, then reset passwords and rotate API keys.
   • Once Reactor and Data Solutions return, every user must reset passwords and rotate API keys, under additional account protections.
   • Reset reused credentials elsewhere.
   • Defenders should scan GitHub repositories for exposed secrets, and review service principal and OAuth app sign-ins from the listed IPs.
3. theregister.com ↗ · pub. 05/11/2026 15:03 · coletado 05/11 16:00

   Chainalysis Confirms Password Hashes, Live Tokens Exposed in Agentic 'On-Path' Breach

   This article adds that Chainalysis's November 4 update significantly worsened the known scope of the breach: password hashes and live authentication tokens for all users were confirmed exposed, contradicting the company's earlier statement that no authentication credentials or session tokens had been accessed. It also details the 'on-path' (AitM) attack vector, the suspension of the password-reset function, the shutdown of KYT, Address Screening, and the login page, and the phased restoration plan requiring IP allowlisting, mandatory password resets, and API key rotation.

   ler a análise desta fonte ocultar

   This article adds that Chainalysis's November 4 update significantly worsened the known scope of the breach: password hashes and live authentication tokens for all users were confirmed exposed, contradicting the company's earlier statement that no authentication credentials or session tokens had been accessed. It also details the 'on-path' (AitM) attack vector, the suspension of the password-reset function, the shutdown of KYT, Address Screening, and the login page, and the phased restoration plan requiring IP allowlisting, mandatory password resets, and API key rotation.

   Chainalysis confirmed in a late-Wednesday (November 4) update that attackers who breached its systems in October also obtained usernames, password hashes, and live authentication tokens, expanding significantly on its earlier disclosure that only non-sensitive identity data (user IDs, names, emails, role labels) had been exposed. The company has not disclosed the hashing algorithm used to protect the passwords, making it impossible to assess how easily the hashes could be cracked offline. Chainalysis described the intrusion as an "on-path attack" — also known as attacker-in-the-middle (AitM) — and an "ongoing multifront cyberattack," but has not named the perpetrator, only noting similarities to attacks on "many other tech platforms in recent weeks." The company's Reactor (used by international law-enforcement customers), Data Solutions, and KYT anti-money-laundering products were taken offline after "abnormal activity" was detected on its transaction-screening systems. Chainalysis maintains there is no evidence that investigation data or attribution data has been accessed or manipulated.

   Technical Details

   Chainalysis first disclosed the breach on October 30, stating an external actor used "offensive agentic techniques" to gain unauthorized access to its internal systems. The November 4 update significantly worsened the picture: the company confirmed that password hashes and live tokens for all Chainalysis users were exposed to the malicious actor, and that it had detected abnormal activity prompting it to take the KYT user interface and API, address-screening products, and the login page offline, directly notifying customers whose KYT accounts "appear to have been accessed without authorization" (chainalysis.com). The password-reset function itself has been disabled while the company hardens its systems, though users have been urged to change reused passwords on other services in the meantime.

   Remediation

   Chainalysis plans to restore KYT and Address Screening on November 5, requiring customers to submit trusted IP addresses to their support team or account manager for an allowlist before resetting passwords. Every user will be required to reset passwords and rotate API keys as part of hardened account-access protections once Reactor and Data Solutions are restored. The company says it is working around the clock with outside security experts to harden its systems and bring the affected products back online securely.

4. bleepingcomputer.com ↗ · pub. 31/10/2026 09:50 · coletado 31/10 10:00

   Chainalysis Discloses Breach After Attackers Use "Offensive Agentic Techniques" Against Internal Systems

   This article adds detail on the timing and handling of the disclosure: Chainalysis published the incident notice on a Friday at roughly 5:14 PM ET, said the unauthorized access occurred "earlier this month," and is using large language models to support a broader security review while still determining which records were accessed per affected organization. It also clarifies that the agentic offensive framework ARTEX — one possible tool used in the intrusion, though unconfirmed — was separately linked by Microsoft to the ConnectWise supply chain compromise. The piece situates the Chainalysis breach within a broader wave of crypto/tech security incidents that same week, including Binance's attribution of its roughly $6.3 billion theft (the largest crypto heist on record) to North Korean state-backed hackers via a compromised DevOps engineer's laptop, a suspected hardware implant found in a Trezor Safe 5 device, and a malicious Cursor-marketplace version of Anthropic's Claude Code extension that planted SSH backdoors on developer machines — none of which are part of the Chainalysis incident itself.

   ler a análise desta fonte ocultar

   This article adds detail on the timing and handling of the disclosure: Chainalysis published the incident notice on a Friday at roughly 5:14 PM ET, said the unauthorized access occurred "earlier this month," and is using large language models to support a broader security review while still determining which records were accessed per affected organization. It also clarifies that the agentic offensive framework ARTEX — one possible tool used in the intrusion, though unconfirmed — was separately linked by Microsoft to the ConnectWise supply chain compromise. The piece situates the Chainalysis breach within a broader wave of crypto/tech security incidents that same week, including Binance's attribution of its roughly $6.3 billion theft (the largest crypto heist on record) to North Korean state-backed hackers via a compromised DevOps engineer's laptop, a suspected hardware implant found in a Trezor Safe 5 device, and a malicious Cursor-marketplace version of Anthropic's Claude Code extension that planted SSH backdoors on developer machines — none of which are part of the Chainalysis incident itself.

   Blockchain analytics firm Chainalysis disclosed a security incident in which an external actor used so-called "offensive agentic techniques" to gain unauthorized access to internal systems and tools earlier this month. The company says accessed customer data was limited to user IDs, full names, email addresses, and organizational role labels, with no evidence that investigation data, authentication credentials, or session tokens were exposed. Chainalysis is still determining which records were accessed per organization and is using large language models (LLMs) to support a broader security review of its platform, while working with external cybersecurity experts. The company stated the incident is unrelated to the recent Binance theft.

   Technical Details

   Chainalysis has not disclosed which vulnerabilities were exploited, which internal tools were accessed, or the duration of attacker access. It remains unclear whether the attackers relied on an existing agentic offensive security framework such as ARTEX — which, according to Microsoft, was also used in the ConnectWise supply chain compromise — or on custom-built autonomous AI agents capable of identifying and chaining exploits on their own.

   Remediation

   Chainalysis advised affected customers to enable two-factor authentication (2FA) and watch for unexpected password reset requests, authentication prompts, and scammers impersonating the company, particularly those offering fund recovery or recruiting services. The company says it is patching vulnerabilities, hardening its systems, and will share further updates as its investigation progresses.

5. thehackernews.com ↗ · pub. 31/10/2026 09:01 · coletado 31/10 10:00 primeiro registro

   Chainalysis Confirms AI-Driven Intrusion Exposing Customer Identity Data

   ler a análise desta fonte ocultar

   Chainalysis, a U.S. blockchain analytics firm whose customers include crypto exchanges, banks, and law enforcement agencies worldwide, disclosed that an external actor used "offensive agentic techniques" to gain unauthorized access to its internal systems and tools in October 2026. The company said the intruder accessed non-sensitive customer data, including user IDs, full names, email addresses, and organization role labels for users provisioned on its platform, but found no evidence that investigation content (graphs, notes, cases), transaction or query results, cleartext passwords, MFA secrets, or session tokens were accessed (chainalysis.com, via helpnetsecurity.com). Chainalysis has not disclosed the specific tactics or tooling behind the "offensive agentic techniques," and has not published the number of affected customers or organizations (cybersecuritynews.com). The company stated the incident is unrelated to the recent Binance hack, which Chainalysis itself has been investigating and which U.S. authorities attributed to the North Korean group TraderTraitor (helpnetsecurity.com).

   Technical Details

   The disclosure frames the intrusion within a broader trend: "We are seeing an industry-wide rise in AI-driven cyber attacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment and our customers' expectations," Chainalysis said. The article notes this comes as adversarial use of AI has intensified, citing a separate campaign by a China state-backed group tracked as Vapor Panda, which used an agentic penetration-testing framework called ARTEX to compromise roughly 140 targets in 11 days as part of a broad access operation. Abnormal AI commented that "agentic intrusion chains and prompt injection" are a distinct category of threat because they depend directly on deployed AI systems, as opposed to AI simply accelerating established attack techniques.

   Remediation

   Chainalysis said it is patching vulnerabilities and hardening its systems, has engaged third-party cybersecurity experts to investigate and review platform security, and as of November 3, 2026, proactively took certain products offline — including Reactor and Data Solutions — pending additional security assessments (helpnetsecurity.com). The company notified affected customers by email, urging them to watch for unexpected password reset requests or authentication prompts, enable two-factor authentication, and remain vigilant against social engineering given the exposure of names and contact details to an actor targeting an organization whose clients include law enforcement and government agencies.

Repetiram sem novidade

• helpnetsecurity.com — Chainalysis Discloses Breach via "Offensive Agentic Techniques", Exposes Customer Contact Data
• infosecurity-magazine.com — Chainalysis Discloses AI-Driven Breach Exposing Non-Sensitive Customer Data
• gbhackers.com — Chainalysis Confirms Cyberattack Exploiting Vulnerabilities via Agentic AI Techniques
• securityweek.com — Chainalysis Discloses AI-Driven Cyberattack Exposing Customer Identity Data
• securityaffairs.com — Chainalysis Confirms AI-Driven Intrusion Exposing Customer Identity Data