Confiant, lub chaw saib xyuas kev ruaj ntseg tshaj tawm, tau pom ib pawg ntawm kev ua phem uas cuam tshuam nrog kev faib cov hnab nyiaj, tso cai rau cov neeg nyiag nkas nyiag cov noob ntiag tug thiab tau txais cov nyiaj ntawm cov neeg siv los ntawm cov hnab nyiaj rov qab. Cov apps tau muab faib los ntawm cloning ntawm qhov chaw raug cai, muab qhov zoo li tus neeg siv rub tawm ib qho app qub.
Malicious Cluster Targets Web3-Enabled Wallets Zoo li Metamask
Hackers tau dhau los ua tswv yim ntau dua thaum engineering tawm tsam kom tau txais txiaj ntsig zoo ntawm cov neeg siv cryptocurrency. Confiant, lub tuam txhab uas mob siab rau tshuaj xyuas qhov zoo ntawm kev tshaj tawm thiab kev hem thawj kev nyab xeeb cov no yuav ua rau cov neeg siv internet, muaj ceeb toom txog ib yam tshiab ntawm kev tawm tsam cuam tshuam rau cov neeg siv ntawm nrov Web3 hnab nyiaj xws li Metamask thiab Coinbase Hnab.
Cov pawg, uas tau txheeb xyuas tias yog "Seaflower," tau tsim nyog los ntawm Confiant ua ib qho kev tawm tsam tshaj plaws ntawm nws hom. Daim ntawv tshaj tawm hais tias cov neeg siv feem ntau tsis tuaj yeem ntes cov apps no, vim tias lawv zoo ib yam li cov apps qub, tab sis muaj qhov sib txawv codebase uas tso cai rau cov neeg nyiag nkas nyiag cov noob kab lus ntawm lub hnab nyiaj, muab lawv nkag mus rau cov nyiaj.
Kev faib tawm thiab cov lus pom zoo
Daim ntawv tshaj tawm pom tias cov apps no tau muab faib tawm feem ntau sab nraum lub khw muag khoom app, los ntawm kev sib txuas pom los ntawm cov neeg siv hauv kev tshawb fawb xyaw xws li Baidu. Cov neeg tshawb xyuas hais tias pawg yuav tsum yog neeg Suav vim yog cov lus uas sau cov lus qhia, thiab lwm yam xws li cov chaw tsim kho vaj tse thiab cov kev pabcuam siv.
Cov kev sib txuas ntawm cov apps no mus txog qhov chaw nrov hauv cov chaw tshawb fawb vim muaj kev txawj ntse ntawm SEO kev ua kom zoo, tso cai rau lawv los ua qib siab thiab dag cov neeg siv kom ntseeg tias lawv nkag mus rau qhov chaw tiag. Lub sophistication nyob rau hauv cov apps no los mus rau txoj kev nyob rau hauv uas cov code yog muab zais, obfuscating ntau npaum li cas ntawm no system ua hauj lwm.
Lub backdoored app xa cov kab lus noob mus rau qhov chaw nyob deb ntawm tib lub sijhawm uas nws tab tom tsim, thiab qhov no yog qhov tseem ceeb nres vector rau Metamask imposter. Rau lwm lub hnab nyiaj, Seaflower kuj siv cov vector zoo sib xws.
Cov kws tshaj lij ntxiv tau ua ntau cov lus pom zoo thaum nws los txog rau khaws cov hnab nyiaj hauv cov khoom siv kom ruaj ntseg. Cov ntawv thov rov qab no tsuas yog muab faib tawm sab nraum lub khw muag khoom, yog li Confiant qhia cov neeg siv kom ib txwm sim nruab cov apps no los ntawm cov khw muag khoom hauv Android thiab iOS.
Cim hauv zaj dab neeg no
Koj xav li cas txog lub hnab nyiaj rov qab Metamask thiab Web3? Qhia rau peb hauv cov lus hauv qab no.
Duab Credit: Shutterstock, Pixabay, Wiki Commons, photo_gonzo
Disclaimer: Kab lus no tsuas yog rau kev ua ntaub ntawv xwb. Nws tsis yog qhov ncaj qha lossis kev thov rau qhov kev yuav lossis muag, lossis kev pom zoo lossis kev pom zoo ntawm ib yam khoom, kev pabcuam, lossis tuam txhab. Bitcoin.com tsis muab peev, peev nyiaj, cai lij choj, lossis tswv yim nyiaj txiag. Tsis yog cov tuam txhab lossis cov neeg sau ntawv ua lub luag haujlwm, ncaj qha lossis tsis ncaj rau, rau ib qho kev puas tsuaj lossis poob lossis ua rau raug iab liam los ntawm lossis kev sib txuas nrog kev siv lossis kev cia siab rau qee cov ntsiab lus, khoom muag lossis kev pabcuam tau hais hauv tsab xov xwm no.
qhov chaw: Bitcoin
Tau qhov twg los: https://coinotizia.com/hackers-are-cloning-web3-wallets-like-metamask-and-coinbase-wallet-to-steal-crypto/