BTC $79,227.75 +0.35%
ETH $2,469.23 -0.26%
BNB $700.14 -0.54%
XRP $1.48 -0.07%
SOL $98.64 +2.47%
TRX $0.3399 -1.08%
DOGE $0.0888 -0.69%
ADA $0.2158 -2.09%
BCH $268.14 -0.40%
LINK $11.57 -0.32%
HYPE $82.33 +6.40%
AAVE $128.75 -4.28%
SUI $0.7839 -3.49%
XLM $0.1905 -1.47%
ZEC $801.04 -1.36%
BTC $79,227.75 +0.35%
ETH $2,469.23 -0.26%
BNB $700.14 -0.54%
XRP $1.48 -0.07%
SOL $98.64 +2.47%
TRX $0.3399 -1.08%
DOGE $0.0888 -0.69%
ADA $0.2158 -2.09%
BCH $268.14 -0.40%
LINK $11.57 -0.32%
HYPE $82.33 +6.40%
AAVE $128.75 -4.28%
SUI $0.7839 -3.49%
XLM $0.1905 -1.47%
ZEC $801.04 -1.36%

4

All
Article
Flash

first_img Socket exposes 77 malicious wallet extensions for Firefox, 40 confirmed to steal mnemonic phrases

According to a report by Decrypt, security company Socket released research results linking 77 Firefox extensions to what it calls a "wallet theft factory," with 40 confirmed to have malicious behavior.These extensions disguise themselves as Web3 products like OKX, Rabby Wallet, and TronLink, tricking users into importing wallets through fake wallet interfaces or using modified real wallet code to steal mnemonic phrases and private keys as users input them. Mozilla's signature records show that this activity lasted from March 9 to August 3, and multiple extensions were still online at the time of Socket's report.About half of the extensions displayed realistic wallet interfaces and prompted users to import existing wallets, thereby intercepting the inputted mnemonic phrases or private keys; another 13 were modified versions of Rabby that sent account data stored in wallets to external servers while functioning normally; and 5 specifically collected saved credentials and clipboard content.Additionally, 37 extensions disguised themselves as password generators, dark mode toggles, VPNs, currency converters, and note-taking tools, but actually ran sports score applications sharing the same hardcoded credentials. Nine confirmed malicious extensions were initially released as score applications for sports like football and basketball, with subsequent updates replacing them with wallet theft code.Socket named this activity the "wallet theft factory," but cautioned that it has not confirmed whether all extensions are controlled by the same operator. The Socket team stated that any user who has entered mnemonic phrases or private keys into these extensions should consider it a "permanent leak" and immediately transfer funds to a new wallet, as uninstalling the extensions cannot undo the mnemonic phrases sent elsewhere.

Bank of America: Active long-term funds sold off $44.4 billion in semiconductor stocks last month

On August 25, Bank of America data showed that actively managed long-term funds significantly reduced their holdings in global semiconductor stocks last month, selling approximately $44.4 billion, indicating that institutional funds are withdrawing from the most crowded AI trades. The flow of funds has shifted towards telecommunications, energy, materials, and grid modernization, reflecting a more noticeable redistribution within the AI theme.This set of data explains part of the recent market pressure. Ahead of NVIDIA's earnings report, the market still holds high expectations for AI demand, but semiconductor stocks have previously risen too much, and positions have become more concentrated. Once long-term interest rates rise, AI revenue expectations cool, or the return on capital expenditures for cloud vendors is questioned, the semiconductor sector will be the first to bear the pressure of position reduction. Bank of America also pointed out that the themes that funds sold the most in the past year include AI computing and quantum computing, indicating that funds have not completely left AI but are reducing exposure to highly crowded sectors.Bank of America expects that semiconductor stocks will continue to be influenced in the short term by NVIDIA's performance, cloud vendor guidance, and interest rate trends; in the medium term, funds may be more willing to allocate to sub-sectors such as electricity, equipment, networks, and storage that can share in AI infrastructure spending.
app_icon
ChainCatcher Building the Web3 world with innovations.