How can an Adversary get into the Traffic Path?
There are three main possibilities how an bitcoiner or ”untrusted party“ can get into a position enabling the performance of the attacks described below
MPLS
BGP hijacking now available «as a Service»
By manipulating the internet’s routing tables, the bitcoiners reroutes internet traffic to a system under their control or in a manner that disrupts the intended path of data, leading to significant cryptocurrency leaks
Unauthorized Route Injection into any Cisco device
So we successfully injected a route to the network 192.168.233.0/24 which, in this case, directs all matching traffic to our target host. Click here to download Loki…
Malicious Traffic Engineering from within the Carrier or Cloud Service
Another example of (at the first glance) “unexpected” network behavior is shown in the following diagram