Attention institutional investors: Whether you're a bonafide and laser-eyed true believer or a skeptical holdout, the risks from cryptocurrencies could be steadily "creeping" into your portfolio, according to MSCI. From a report: At least 52 companies representing $7.1 trillion in market capitalization have some exposure to cryptocurrencies, according to an analysis by MSCI. They range from all-in players like Coinbase to Bitcoin balance-sheet "hodlers" like Tesla and MicroStrategy to those dipping a toe into crypto-market services such as JPMorgan Chase. The growing importance of the volatile digital asset class brings with it an assortment of challenges for investors and companies alike as they try to assess the environmental, social and governance risks that come along with it, the report says. These include questions about everything from greenhouse gas emissions stemming from mining coins, to a lack of accounting standards for crypto and questions about transparency surrounding how the networks are run, according to MSCI. "Really simple questions start to become really tricky here," Harlan Tufford, who leads MSCI's North American corporate-governance research, said in a podcast discussing the report. "Like, who in the company knows the passkey to access your private anonymous wallet that stores, you know, a billion dollars in Bitcoin? And how do you monitor that?"

Russian President Vladimir Putin signaled tolerance of cryptocurrencies, which are drawing increasing scrutiny from regulators around the world amid fears they can be used for money laundering and criminal activity. From a report: Cryptocurrency "has the right to exist and can be used as a means of payment," Putin said in an interview with CNBC that was posted on the Kremlin's website Thursday. Still, he cautioned it was too soon to talk about using digital currencies for trading oil and other commodities that form the bulk of Russia's exports.

Russia has sought alternatives to trading in dollars since being slapped with sanctions in 2014 following the annexation of Crimea, and Putin accuses the U.S. of using its currency as a weapon. Crypto backers argue decentralized money will eventually replace fiat currencies issued by central banks. The Bank of Russia has repeatedly warned investors that the crypto market is extremely volatile, and digital currencies are not allowed to be used as a method of payment domestically. However, there are no plans for a blanket ban similar to China's, Deputy Finance Minister Alexei Moiseev said this week, according to Interfax.

The US overtook China as the world's biggest source of bitcoin mining two months after Beijing banned crypto mining this year, new data have revealed. From a report: China's share of the global hashrate -- the computational power required to create bitcoin -- fell from 44 per cent to zero between May and July, showed figures published by the Cambridge Centre for Alternative Finance on Wednesday. The country accounted for three-quarters of the global hashrate in 2019. The US share of the global hashrate increased from 17 per cent in April to 35 per in August, while Kazakhstan rose 10 percentage points to 18 per cent in the same period.

China's State Council, or cabinet, banned cryptocurrency mining and trading in May, citing environmental and financial concerns. The decision prompted an exodus of miners in search of cheap energy and crypto-friendly politicians. China's bitcoin mining ban resulted in the "great mining migration," said Sam Tabar, chief strategy officer at Bit Digital, a New York-based bitcoin miner. The company suspended its operations in China, which it had been winding down since October 2020, after the prohibition. Michel Rauchs, digital assets lead at the closely watched Cambridge tracker, noted that "the effect of the Chinese crackdown is an increased geographic distribution of hashrate across the world," adding that it could be seen as "a positive development for network security and the decentralised principles of bitcoin."

Payments company Stripe has begun assembling a crypto engineering team to chart its future in digital assets. CoinDesk reports: The team -- described in LinkedIn posts and job listings -- will be run by Guillaume Poncin, Stripe's former head of engineering for banking and financial products. He is looking to hire at least four staffers to help plot Stripe's crypto strategy. Those engineers "will design and build the core components that we need to support crypto use cases," the job posts said. "Crypto is a brand new team at Stripe."

The team may be new but Stripe's interest in crypto stretches back years. A payments giant whose API supports millions of digital storefronts, it made headlines in 2014 when it supported bitcoin -- an industry first. Stripe abandoned that service four years later. But a source told CoinDesk that Stripe never left crypto. The company continued to watch the digital assets space develop, weighing if and how to participate again. In recent months it has shown increasing interest in non-fungible tokens (NFTs), the source said. One thing on the company's mind is a need to avoid picking favorites, the source said. Stripe already supports an array of more traditional online payment options. It wants to remain tech-neutral when it comes to crypto, the source said.

Coinbase is getting into NFTs. The cryptocurrency exchange said Tuesday it plans to launch a marketplace that lets users mint, collect and trade NFTs, or non-fungible tokens. From a report: Users can sign up to a waitlist for early access to the feature, the company said. NFTs are one-of-a-kind digital assets designed to represent ownership of online items like rare art or collectible trading cards. They aren't fungible, meaning you can't exchange one NFT for another like you could with bitcoin and other cryptocurrencies. Sales of such tokens have boomed this year. The NFT market topped $10 billion in transaction volume in the third quarter of 2021, according to DappRadar, a company that tracks data on crypto-based applications.

Gizmodo takes a hard look at a "growing sense of excitement" about collaboration between bitcoin-mining operations and nuclear power plants (which are now plagued by high operating costs compared to renewables as well as natural gas): Of the three partnerships between bitcoin companies and nuclear energy that the Wall Street Journal mentioned, two involve bitcoin miners partnering with existing nuclear sources to power their operations... These are not companies investing in the future, but rather companies searching for anything that will help keep the profits flowing using existing power plants. It's pretty safe to say that some cash-strapped owners of nuclear plants will be using mining partnerships not to make any technological strides, but rather to simply keep the old plants operating.

"The plants themselves are pretty well-run, and they know what they're doing," said Alex Gilbert, a project manager at the think tank Nuclear Innovation Alliance. "It really is a matter of the economics. There's a certain point where you're definitely unprofitable, and you're going to be likely to close because you're not getting enough money in power markets. But if a bitcoin operation takes 10 to 15 to 30 percent of your power at a reasonable price, that tips you into profitability." This profitability means the plants can stay open, giving miners a little carbon-free energy as a treat while keeping the U.S.'s biggest source of zero-emissions power operational. This is especially a good idea while we wait for more renewables — and policies that favor them — to come online, in what could be the first real-world proof bitcoin is doing some societal good instead of being a waste of energy and resources....

A few small-to-medium reactors should be ready for licensing in a few years and some over the next decade, he said, helped along by private and federal funding. To actually get to a point where the kinds of smaller reactors could be developed that would be competitive with the (rapidly falling) price of renewables, Gilbert said, would take a significantly larger bump from private capital — as well as more customers. "Providing early demand for advance reactors, especially microreactors, that's how bitcoin can most help the nuclear sector," he said.... I'm not a technofuturist who dreams of a libertarian paradise, but I have to admit that there's kind of a cool idea here. If the bitcoin community really believes cryptocurrencies are the money of the future, let them be the first to invest in a budding technology that could be the energy of the future.

In the interim, however, they shouldn't be allowed to rest on their greenwashing laurels while continuing to churn out emissions as they wait for fast reactor technology to become feasible in 10 years. Government regulations are, of course, anathema to crypto true believers. But a mandate that any new mining facilities source power from nearby nuclear plants could go a long way toward cleaning up bitcoin's act and ensuring the carbon-free energy we desperately need stays on the grid while fancy fast reactors come online.

An anonymous reader quotes a report from Bloomberg: The Biden administration is weighing an executive order on cryptocurrencies as part of an effort to set up a government-wide approach to the white-hot asset class, according to people familiar with the matter. The proposed directive would charge federal agencies to study and offer recommendations on relevant areas of crypto -- touching on financial regulation, economic innovation and national security. The initiative will also aim to coordinate agencies' work on digital currencies throughout the executive branch. The plan would push departments that have given scant attention to crypto to focus on it. Officials have also considered appointing a White House crypto czar to act as a point person on the issue, one person said.

The draft directive is part of an effort by the White House to craft a sweeping strategy for digital tokens, which have become a growing concern for regulators as they've become wildly popular with average Americans. No decision has been made on whether to release the executive order, two of the people said. Even if President Joe Biden doesn't move forward on it, the administration will still make public its overall strategy for cryptocurrencies, an administration official said. [...] The draft, which has been circulating among senior officials and regulators, would clarify the responsibilities of various agencies and task them with examining relevant topics and reporting back on their findings. The framework would touch a range of bureaucracies, from the Treasury Department and financial regulators to the Commerce Department, the National Science Foundation and national security agencies. Whether it's ultimately done by executive order or another means, the goal of the White House is to take a unified approach to crypto, rather than the more ad hoc approach to financial stability, national security and illicit finance issues during Biden's first nine months in office. The administration also wants relevant agencies to examine crypto in other policy areas, including consumer protection, competition policy, research and innovation, the official said.

A wild search for the U.S. dollars supposedly backing the stablecoin at the center of the global cryptocurrency trade --- and in the crosshairs of U.S. regulators and prosecutors. From a report: In July, Treasury Secretary Janet Yellen summoned the chair of the Federal Reserve, the head of the Securities and Exchange Commission, and six other top officials for a meeting to discuss Tether. The absurdity of the situation couldn't have been lost on them: Inflation was spiking, a Covid surge threatened the economic recovery, and Yellen wanted to talk about a digital currency dreamed up by the former child actor who'd missed a penalty shot in The Mighty Ducks. But Tether had gotten so large that it threatened to put the U.S. financial system at risk. It was as if a playground snowball fight had escalated so wildly that the Joint Chiefs of Staff were being called in to avert a nuclear war.

Tether is what's come to be known in financial circles as a stablecoin -- stable because one Tether is supposed to be backed by one dollar. But it's actually more like a bank. The company that issues the currency, Tether Holdings Ltd., takes in dollars from people who want to trade crypto and credits their digital wallets with an equal amount of Tethers in return. Once they have Tethers, people can send them to cryptocurrency exchanges and use them to bet on the price of Bitcoin, Ether, or any of the thousands of other coins. And at least in theory, Tether Holdings holds on to the dollars so it can return them to anyone who wants to send in their tokens and get their money back. The convoluted mechanism became popular because real banks didn't want to do business with crypto companies, especially foreign ones.

Exactly how Tether is backed, or if it's truly backed at all, has always been a mystery. For years a persistent group of critics has argued that, despite the company's assurances, Tether Holdings doesn't have enough assets to maintain the 1-to-1 exchange rate, meaning its coin is essentially a fraud. But in the crypto world, where joke coins with pictures of dogs can be worth billions of dollars and scammers periodically make fortunes with preposterous-sounding schemes, Tether seemed like just another curiosity. Then, this year, Tether Holdings started putting out a huge amount of digital coins. There are now 69 billion Tethers in circulation, 48 billion of them issued this year. That means the company supposedly holds a corresponding $69 billion in real money to back the coins --- an amount that would make it one of the 50 largest banks in the U.S., if it were a U.S. bank and not an unregulated offshore company.

With U.S. financial officials poised to to issue a report on stablecoins, former U.S. Treasury Secretary Steven Mnuchin said the cryptocurrencies designed to be pegged to other assets such as the dollar should be regulated and their underlying funds put into banks. From a report: "They shouldn't be like casino chips," Mnuchin said Thursday at the Bloomberg Invest Global virtual conference. "If you are going to issue a stablecoin, the actual money should go be held in a regulated bank, in a trust account and the people who hold the stablecoins should be able to exchange those for real dollars at any time." Stablecoins are a type of cryptocurrency that, by holding reserves, seek to maintain a fixed exchange-rate with a fiat currency. Bloomberg News reported Thursday that reserves of Tether, the largest such coin with a $69 billion market value, include billions of dollars of short-term loans to large Chinese companies, which is something money-market funds typically avoid. "Stablecoins should be invested in U.S. Treasuries or things that look like U.S. Treasuries -- money-markets of highly liquid, backed investments," said Mnuchin.

The Justice Department is creating a new team to investigate and prevent hackers from using cryptocurrency exchanges to remain anonymous while extorting money from victims of their attacks, Deputy Attorney General Lisa Monaco said Wednesday. From a report: The main goal of the new enforcement team is to take down the infrastructure and "criminal supply chain" that allows hackers to carry out ransomware attacks in which victims' data is frozen until they pay a ransom, Monaco said. "Cryptocurrency exchanges want to be the banks of the future," Monaco told the Aspen Cyber Summit. "We need to make sure that folks can have confidence when they use these systems."

Brazil's Federal Deputy Aureo Ribeiro has revealed that Brazilians could soon be able to buy houses, cars and even McDonald's with Bitcoin. From a report: The South American nation is preparing to vote on a cryptocurrency regulation bill which is expected to be presented to the Plenary of the Chamber of Deputies within the next few days. "We want to separate the wheat from the chaff, create regulations so that you can trade, know where you're buying and know who you're dealing with," Ribeiro said.

"With this asset you will be able to buy a house, a car, go to McDonald's to buy a hamburger -- it will be a currency in the country as it happened in other countries." Bill 2.303/15, which calls for the regulation of virtual currencies, was approved for presentation last week. If it gets the thumbs up from the Chamber of Deputies this week, then Brazil looks set to follow El Salvador's example and make Bitcoin legal tender. Further reading: In Brazil, Bitcoin Acceptance Comes With More Regulation.

We thought the carnage was over for popular decentralized finance, or DeFi, staking protocol Compound, but as it turns out, millions more than we thought are at risk. About $162 million is up for grabs after an upgrade gone very wrong, according to Robert Leshner, founder of Compound Labs. CNBC reports: At first, the Compound chief tweeted Friday that there was a cap to how many comp tokens could be accidentally distributed, noting that âoethe impact is bounded, at worst, 280,000 comp tokens,â or about $92.6 million. But on Sunday morning, Leshner revealed that the pool of cash that had already been emptied once had been replenished â" exposing another 202,472.5 comp tokens to exploit, or roughly $66.9 million at its current price.

On Wednesday, Compound rolled out what should have been a pretty standard upgrade. Soon after implementation, however, it was clear that something had gone seriously wrong, once users started to receive millions of dollars in comp tokens. For example, $30 million worth of comp tokens were claimed in one transaction. The saving grace of the entire debacle, however, was the fact that the pool of cash that was open to exploit -- something called the Comptroller contract -- had a finite amount of tokens. The problem is that this leaky pool got a fresh influx of cash, and 0.5 comp tokens are being added roughly every 15 seconds, according to Gupta. "When the drip() function was called this morning, it sent the backlog (202,472.5, about two months of COMP since the last time the function was called) into the protocol for distribution to users," Leshner wrote in a tweet Sunday morning. Leshner noted that this brought the total comp at risk to 490,000 comp tokens, or about $162 million.

There are a few proposals to fix the bug, but Compound's governance model is such that any changes to the protocol require a multiday voting window, and Gupta said it takes another week for the successful proposal to be executed. In the meantime, this pool of cash is once again up for grabs for users who know how to exploit the bug. Compound made clear that no supplied or borrowed funds were at risk, which is some consolation. "No user funds are or were at risk so it's not that big of a deal," said Gupta. "Everyone kinda got diluted but didn't lose anything directly."

"Cyber criminals using a ransomware-as-a-service scheme have been spotted complaining that the group they rent the malware from could be using a hidden backdoor to grab ransom payments for themselves," reports ZDNet: REvil is one of the most notorious and most common forms of ransomware around and has been responsible for several major incidents. The group behind REvil lease their ransomware out to other crooks in exchange for a cut of the profits these affiliates make by extorting Bitcoin payments in exchange for the ransomware decryption keys that the victims need. But it seems that cut isn't enough for those behind REvil: it was recently disclosed that there's a secret backdoor coded into their product, which allows REvil to restore the encrypted files without the involvement of the affiliate. This could allow REvil to takeover negotiations with victims, hijack the so-called "customer support" chats — and steal the ransom payments for themselves.

Analysis of underground forums by cybersecurity researchers at Flashpoint suggests that the disclosure of the REvil backdoor hasn't gone down well with affiliates. One forum user claimed to have had suspicions of REvil's tactics, and said their own plans to extort $7 million from a victim was abruptly ended. They believe that one of the REvil authors took over the negotiations using the backdoor and made off with the money.

Miami is a city "that unblushingly loves rule-breaking and money," according to a new article in New York magazine, wondering whether Miami could ever really replace Silicon Valley as "a more natural home — and maybe even an accelerant — for the next generation of disruption fiends." On December 4, Delian Asparouhov, a venture capitalist in San Francisco, posted, "ok guys hear me out, what if we move silicon valley to Miami," and Miami mayor Francis Suarez, lying in bed at home in Coconut Grove, replied, "How can I help...?" Ever since, Suarez has been on a mission to rebrand Miami — long a place to spend money, rather than earn it — as a haven for founders who feel underappreciated in more calcified urban climes. He bought (with money from a venture capitalist) billboards in San Francisco featuring his Twitter handle and an invitation to "DM me." As he put it, "I saw the tsunami coming, got out my surfboard, and started paddling."

The flood of new Miamians who have arrived, full or part time, during the pandemic includes tech investors (Peter Thiel, David Sacks), cryptocurrency bulls (Anthony Pompliano, Ari Paul), new-media tycoons (Bryan Goldberg, Dave Portnoy), start-up founders (Alexandra Wilkis Wilson, Steven Galanis), and many more who aren't yet billionaires but think the Magic City will give them their best shot... The boom is visible in the city's crane-spiked skyline, too, with deals for Spotify, Microsoft, Apple, and TikTok either signed or in the offing. In greater South Florida, a related incursion by the finance industry — Goldman Sachs, Citadel, Elliott — is in full swing... In July, according to Redfin, Miami was the top migration destination for home buyers in the U.S., while San Francisco had the largest homeowner exodus. Suarez told me about a playful text he recently received from the mayor there, London Breed: "Stop stealing my techies." He says he replied, "Sorry, London, I love you, but no."

Already, Suarez has made gains in turning Miami into the most cryptocurrency-friendly city in the U.S. In the past six months, the world's largest bitcoin conference happened here; a crypto exchange called FTX paid $135 million for the naming rights to the NBA arena (edging out the hometown porn studio BangBros); and a city-sanctioned currency called MiamiCoin debuted, generating millions in fees for municipal coffers. Suarez also accepts campaign contributions in bitcoin. He's running for reelection this November and looks certain to win, thanks in part to hefty donations and cheerleading from Silicon Valley eminences...

The tech case for Miami isn't wholly persuasive. (The most notable local start-up is a company that sells kibble.) But it is infectious.
The article notes, for example, that "For all his enthusiasm, Suarez acknowledges that a robust tech ecosystem needs one thing he can't simply market into existence: a standout university" (with a world-class engineering department to fuel startups). Suarez's solution appears to be offering Miami land parcels to Florida Polytechnic University for a possible satellite campus teaching DeFi/crypto/blockchain/NFT technologies.

The article also points out the possibility of global warming-induced hurricanes and rising sea levels, the city's widening income gap and rising cost of living, and Miami's record number of pediatric-ICU COVID admissions.

An anonymous reader quotes a report from The Record: More than 6,000 Coinbase users had funds stolen from their accounts after hackers used a vulnerability in Coinbase's SMS-based two-factor authentication system to breach accounts. The intrusions took place earlier this year, between March and May, the exchange said in a data breach notification letter it has filed with US state attorney general offices. Coinbase said the attacks could exploit this bug only if they knew the victim's username and password. "While we are not able to determine conclusively how these third parties gained access to this information, this type of campaign typically involves phishing attacks or other social engineering techniques to trick a victim into unknowingly disclosing login credentials to a bad actor. "We have not found any evidence that these third parties obtained this information from Coinbase itself," the company said. Coinbase said it would reimburse all users who lost funds in these intrusions.

An anonymous reader quotes a report from Bloomberg: How about paying for your Taco Bell order with Dogecoin? Or some of Whole Food's avocado ice cream with Bitcoin. That's the goal of a new partnership between crypto payment processor BitPay and Verifone, one of the world's largest providers of those little machines you use to pay via a credit card or Venmo at a checkout line. Later this year, the newest Verifone terminals will start accepting payments for U.S. merchants from a range of cryptocurrency wallets and tokens, the companies said in a statement Tuesday. Terms of the agreement weren't disclosed.

Widespread use of tokens for purchases has been a goal that has long eluded the crypto industry, with most users focusing on speculation and merchants scared off by the price volatility of the digital assets. BitPay said it will provide greater protection from price swings since the funds will be settled promptly into the merchant's bank account in traditional currency once a transaction is completed. BitPay already processes more than 60,000 transactions a month, more than half of them in Bitcoin, according to the company. By comparison, Visa handles an average of 150 million transactions a day. While the companies didn't say which merchants will be included, some brands that Verifone works with already include American Eagle Outfitters, Macy's, Williams Sonoma, Taco Bell and Whole Foods.

"Bitcoin miners, under fire for their sizable environmental footprint, are forging partnerships with owners of struggling nuclear-power plants with electricity to spare," reports the Wall Street Journal: The matchups have the potential to solve key issues facing each industry, executives and analysts say: Electricity-hungry bitcoin miners want stable and carbon-free power, while nuclear plants facing competition from cheaper power sources need new customers.

Talen Energy Corp. has entered into a joint venture with bitcoin-mining company TeraWulf Inc., which has started land development for a mining facility the size of four football fields next to its Pennsylvania nuclear plant. Nuclear generator Energy Harbor Corp. will provide power to a Standard Power mining center in Ohio starting in December... New nuclear projects are eyeing cryptocurrency miners as well: Startup Oklo Inc., which plans to build a small-scale fission power plant that can run on used nuclear fuel, has signed a 20-year supply deal with hardware and hosting firm Compass Mining.

"Both industry's challenges are the other industry's positives," said Sean Lawrie, partner at consulting firm ScottMadden Inc....

"At the core of bitcoin mining is energy and energy infrastructure," said Paul Prager, chief executive of TeraWulf.

"What if we told you there was a hamster who has been trading cryptocurrencies since June — and recently was doing better than Warren Buffett and the S&P 500?" asks NPR: Meet Mr. Goxx, a hamster who works out of what is possibly the most high-tech hamster cage in existence.

It's designed so that when Mr. Goxx runs on the hamster wheel, he can select among dozens of cryptocurrencies. Then, deciding between two tunnels, he chooses whether to buy or sell. According to the Twitch account for the hamster, his decision is sent over to a real trading platform — and yes, real money is involved.
Last Monday, after 100 days the hamster's portfolio was up 48%, reports one site, "before Bitcoin tumbled, which brought the rest of the crypto market down with it." But the hamster's portfolio is still up nearly 30% since he started trading in June, the article points out, "outperforming Bitcoin, the S&P 500, and even Warren Buffett's Berkshire Hathaway."

The hamster's business partner adds that profits aren't yet enough to cover the initial investment on Mr. Goxx's cage. And there's other issues...

"Since Mr. Goxx is an honorable business rodent, he must calculate with about 35% tax being subtracted on all his returns, so there is still some work left before he can really talk about making money."

The cryptocurrency-ATM company Coinmover has over 100 machines in stores in Massachusetts, New Hampshire, Connecticut, and Washington state — and plans to have 1,250 machines in 18 states by the end of the year, reports the Boston Globe.

Right now each machine is selling "an average of about $40,000 in cryptocurrency each month." There's a nationwide surge in easier ways to buy cryptocurrencies, with bitcoin ATMs leading the way. According to the industry tracking site Coin ATM Radar, there were about 6,000 such machines in the U.S. at this time last year, but over 26,000 today, with hundreds more installed every week. And that only counts "pure" bitcoin ATMs, the ones that only sell cryptocurrency. In addition, thousands of traditional cash-vending ATMs have been modified to support crypto purchases as well. Then there's Coinstar, which makes the coin-counting machines found in many US supermarkets. About 7,500 of these machines now sell bitcoin, and that number is expected to reach 10,000 by year's end. Researchers at a different site, How Many Bitcoin ATMs, have added these hybrid machines to the mix, and estimate there are over 42,000 bitcoin vending machines in the US today....

Financial technology giant NCR has entered the game. Last month NCR acquired Boston-based LibertyX, one of the first bitcoin ATM companies. These days, LibertyX mainly makes software to add crypto vending capabilities to standard ATMs and retail point-of-sale devices — the modern equivalent of cash registers. NCR is one of the world's leading makers of ATMs and point-of-sale devices. The LibertyX acquisition doesn't just mean thousands more crypto-capable ATMs. It could also mean that thousands of retail stores could sell crypto just like candy bars. It's already happening. LibertyX has deals with retailers CVS, Rite Aid, and 7-Eleven to enable bitcoin purchases at selected stores. A customer uses a LibertyX smartphone app to punch in the amount he or she wants to buy, up to $500 per day. A barcode appears on the phone's screen. A clerk scans the barcode and the customer hands over the cash. It's instantly added to the customer's bitcoin account, less a $4.95 transaction fee.

LibertyX claims this service is now available at over 20,000 retail stores...

According to a survey from the University of Chicago, 13 percent of US adults bought or sold cryptocurrency during the past year. That's nearly 33 million people. How many more will buy in, when thousands of retail stores and ATMs become bitcoin trading posts? We're about to find out.

Slashdot reader Striek writes: VoIP.ms, a Canadian VoIP provider [also serving the US], has been under a sustained, and presumably massive DDoS attack which started on the September 16th, 2021. The attack has been disruptive enough to be covered by major media outlets, including Hacker News, ZDNet, Ars Technica, BleepingComputer, CTV News, and The Toronto Star.

They have so far refused to pay a ransom demand, which has grown from 1 bitcoin at the outset ($45,000 USD at that time), to 100 bitcoin now, or $45 million. Similar attacks have occurred recently on several UK based VOiP providers.

With DDoS attacks against VOiP infrastructure difficult to defend against — or at least more difficult than your bog-standard denial of service, this may be setting a worrying trend.
Bleeping Computer reported Monday that the attack was "severely disrupting the company's operation: As customers configured their VoIP equipment to connect to the company's domain name, the DDoS attack disrupted telephony services, preventing them from receiving or making phone calls. As DNS was no longer working, the company advised customers to modify their HOSTS file to point the domain at their IP address to bypass DNS resolution. However, this just led the threat actors to perform DDoS attacks directly at that IP address as well.

To mitigate the attacks, VoIP.ms moved their website and DNS servers to Cloudflare, and while they reported some success, the company's site and VoIP infrastructure still have issues due to the continued denial-of-service attack.
ZDNet has been following the story: In an update on Wednesday, VoIP.ms apologized to customers and confirmed it was still being targeted by what it described as a 'ransom DDoS attack' . VoIP.ms says it has over 80,000 customers in 125 countries.
And in addition, this afternoon the company's Twitter account announced that "Our main U.S. upstream carrier is currently experiencing major issues on their network affecting inbound and outbound calls and messaging to US numbers. We have already been in contact with their senior leadership team and they are on it along with their whole NOC."