MetaMask, lub hnab nyiaj Web3 nrov, ceeb toom tias tsis siv neeg Apple iCloud thaub qab tuaj yeem yog qhov pheej hmoo uas tuaj yeem tso cai rau hackers nyiag nyiaj los ntawm nws cov neeg siv.
Lub hnab nyiaj software tsim tau qhia cov neeg siv kom lov tes taw cov ntaub ntawv thaub qab.
Cov pab neeg Hais nyob rau hauv ib tug Twitter xov Hnub Sunday hais tias nws cov neeg siv cov nyiaj tuaj yeem raug nyiag yog tias lawv tau qhib qhov thaub qab ntawm MetaMask cov ntaub ntawv ntawm lawv cov Apple mobile li. Xws li kev cuam tshuam tuaj yeem tshwm sim yog tias ib tus neeg tau txais kev nkag mus tsis raug cai rau cov ntaub ntawv rhiab app upload rau iCloud - tshwj xeeb ntawm phishing tawm tsam.
"Yog tias koj tau qhib iCloud thaub qab rau cov ntaub ntawv app, qhov no yuav suav nrog koj tus password-encrypted MetaMask vault. Yog tias koj tus password tsis muaj zog txaus, thiab ib tus neeg nyiag koj cov ntaub ntawv pov thawj iCloud, qhov no tuaj yeem txhais tau tias cov nyiaj nyiag khoom, "tus pab pawg MetaMask tau sau.
Cov lus ceeb toom tuaj ob peb hnub tom qab tus neeg siv MetaMask hu ua Domenic Iacovone thov kom tau poob ntau NFTs thiab cov khoom muaj nqis kwv yees li $ 655,000 nyob rau hauv tag nrho tom qab ib tug neeg coj lawv tus account iCloud.
Qhov zoo li tau tshwm sim yog tias tus neeg nyiag nkag tau txais kev tswj hwm ntawm Iacovone's iCloud account thiab nyiag lub hnab nyiaj Keystore - cov ntaub ntawv nrog JSON hom uas tuav cov ntawv encrypted ntawm lub hnab nyiaj tus yuam sij ntiag tug xav tau los tso cai ua lag luam.
Qhov tseem ceeb, Apple lub xov tooj ntawm tes tuaj yeem rub tawm cov ntaub ntawv app. Hauv cov txheej txheem thaub qab, cov ntaub ntawv uas muaj cov yuam sij ntiag tug (uas txhais tau tias tsuas yog siv hauv zos ntawm lub cuab yeej) tuaj yeem rub tawm mus rau Apple cov huab servers, uas cov neeg ua phem yuav nkag tau rau hauv qhov xwm txheej ntawm phishing nres, piv txwv li.
Raws li Serpent, tus tsim ntawm lub tuam txhab kev ruaj ntseg crypto-tsom mus rau Sentinel, tus neeg ua txhaum cai yog ib tug neeg los ntawm "Apple Inc" thiab xa ntawv mus rau Iacovone nug kom rov pib dua nws Apple ID password. Tus hacker hu ua Iacovone ntawm nws tus lej xov tooj thiab siv tus lej hu xov tooj tsis zoo.
Hauv kev tau txais cov cai, tus neeg nyiag zaub tau muab lub peev xwm los hloov tus password kev nyab xeeb, thiab tom qab ntawd tau nkag mus rau Iacovone cov ntaub ntawv tseem ceeb ntiag tug. Qhov no, nyob rau hauv lem, qhib lub qhov rooj rau lawv lub hnab nyiaj MetMask thiab muaj peev xwm hloov tawm cov khoom muaj feem cuam tshuam.
Iacovone tso tawm tias ob peb ntawm nws cov tsis-fungible tokens (NFTs) raug tshem tawm hauv qhov kev tshwm sim, suav nrog peb NFTs los ntawm Mutant Ape Yacht Club (28478, 8952 7536) thiab peb Gutter Cats (2280, 2769, 2325). Ntxiv rau cov NFTs no, Iacovone tau hais tias tus neeg nyiag nkag tau xa tawm $ 100,000 tus nqi ntawm APE tokens.
Nws tshwm sim los ntawm qhov xwm txheej no uas tsis yog MetaMask lossis Apple ua txhaum. Qhov xwm txheej tau tshwm sim vim muaj kev ruaj ntseg ua haujlwm tsis muaj zog los ntawm Iacovone ua ke nrog ib txwm muaj nyob hauv Apple li, thiab ib qho uas cov neeg siv tuaj yeem tua. Pab pawg MetaMask muaj, txawm li cas los xij, qhia cov neeg los lov tes taw iCloud thaub qab, tshaj tawm cov ntsiab lus ntawm cov kauj ruam kom tua nws.
Yav dhau los, ntau qhov xwm txheej tau tsom rau cov tswv ntawm NFTs uas muaj txiaj ntsig zoo, xws li los ntawm email-raws li phishing lossis los ntawm kev tshaj tawm phishing txuas txhawm rau txhawm rau hla crypto hnab nyiaj xws li MetaMask. Tsuas yog lLub hli, Lub Block qhia tias 35 NFTs, suav nrog Bored Apes, raug nyiag los ntawm phishing tawm tsam kis los ntawm kev sib txuas tsis zoo ntawm social media platform Twitter.
MetaMask tsis teb rau qhov kev thov tawm tswv yim los ntawm lub sijhawm xovxwm.
© 2022 The Block Crypto, Inc. Tag Nrho Cov Cai. Kab lus no tsuas yog muab ua kev qhia nkaus xwb. Nws tsis yog muab los yog npaj rau siv raws li kev cai lij choj, se, peev, nyiaj txiag, lossis lwm yam kev qhia.
Tau qhov twg los: https://www.theblockcrypto.com/post/142304/metamask-advises-users-to-disable-automatic-icloud-backups-of-its-wallet-data-to-prevent-hacks?utm_source=rss&utm_medium= rss