Scan to download
BTC $70,445.00 +4.73%
ETH $2,042.70 +4.31%
BNB $644.01 +2.97%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $451.60 +3.17%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%
BTC $70,445.00 +4.73%
ETH $2,042.70 +4.31%
BNB $644.01 +2.97%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $451.60 +3.17%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%

sona

ClickFix attack escalates, hackers impersonate VCs and hijack browser extensions to steal crypto assets

The cybersecurity agency Moonlock Lab reports that crypto hackers have recently upgraded their "ClickFix" attack method, beginning to impersonate venture capital firms to contact target users through social platforms and lure them into executing malicious code to steal crypto assets.Attackers disguise themselves as fake venture capital firms such as SolidBit, MegaBit, and Lumax Capital, sending collaboration invitations via LinkedIn and guiding victims to fake Zoom or Google Meet meeting links. The pages embed a fake Cloudflare "I am not a robot" verification button, which, when clicked, copies malicious commands to the clipboard and tricks users into pasting and executing them in the terminal, thus completing the attack. Researchers point out that this method circumvents traditional security mechanisms by "making victims execute commands themselves."Meanwhile, hackers are also hijacking browser extensions to carry out attacks. John Tuckner, founder of cybersecurity company Annex Security, revealed that the Chrome extension QuickLens, after changing ownership on February 1, released a new version containing malicious scripts two weeks later, triggering ClickFix attacks and stealing user data. The extension had about 7,000 users and has since been removed from the store. Reports indicate that the hijacked extension scans crypto wallet data and mnemonic phrases, and scrapes Gmail content, YouTube channel data, and web login or payment information.

Hackers impersonate VC and hijack the QuickLens plugin, using ClickFix technology to steal cryptocurrency assets

According to Cointelegraph, hackers are using the "ClickFix" attack method to steal cryptocurrencies, with the latest two attacks involving impersonating venture capital firms and hijacking browser extensions.Cybersecurity company Moonlock Lab reports that scammers impersonate fake VCs such as SolidBit, MegaBit, and Lumax Capital, contacting users via LinkedIn to offer collaboration opportunities, then directing them to click on fake Zoom and Google Meet links. After clicking the link, users are led to a page with a forged Cloudflare "I'm not a robot" verification box; clicking this box copies malicious commands to the clipboard and prompts users to open a terminal to paste the so-called verification code, thus executing the attack.Moonlock Lab points out that this method turns victims into execution mechanisms, bypassing defenses in the security industry. Meanwhile, hackers are also spreading malware by hijacking the Chrome extension QuickLens. This extension allows users to run Google Lens searches directly in the browser, and after ownership was transferred, the new version contains malicious scripts that can initiate ClickFix attacks and steal information.The extension has about 7,000 users, and once hijacked, it searches for cryptocurrency wallet data and recovery phrases to steal funds, as well as scraping Gmail inbox content, YouTube channel data, and login credentials or payment information entered in web forms. The extension has been removed from the Chrome Web Store. The ClickFix technique has been popular among hackers since last year, forcing victims to manually execute malicious payloads, affecting thousands of businesses and multiple industries worldwide.

Coinbase CEO: Traditional finance still has cognitive dissonance towards crypto, and the company is underestimated by Wall Street

Coinbase CEO Brian Armstrong posted on the X platform responding to "why Wall Street always misunderstands or underestimates Coinbase." He stated that there is a clear trend of differentiation among traditional financial institutions regarding the crypto industry, with some leading financial institutions actively embracing crypto assets. Currently, five globally systemically important banks (GSIBs) have begun collaborating with Coinbase, while about half of large financial institutions are accelerating their involvement in crypto business and hiring related talent.As regulatory clarity gradually improves, the acceptance of the crypto industry by traditional finance continues to rise. However, at the same time, some institutions remain cautious or even resistant. These institutions have long built their career paths on the traditional financial system, and therefore are naturally skeptical of the structural disruptions brought by crypto. Similar to how the taxi industry faced Uber, the hotel industry faced Airbnb, and the aerospace industry faced SpaceX, cryptocurrencies are directly disrupting Wall Street, so it is not surprising that some people on Wall Street misunderstand cryptocurrencies/Coinbase.Additionally, Brian Armstrong revealed Coinbase's performance data, including a 156% year-over-year increase in total trading volume by 2025 and a doubling of market share, a threefold growth in the scale of assets under custody on the platform over three years, and currently 12 products with annualized revenue exceeding $100 million. Investors should focus on the company's long-term execution capabilities and business performance records, rather than solely relying on analyst model predictions. Furthermore, since GAAP net profit includes unrealized gains and losses from the company's held crypto assets, adjusted net profit better reflects the true operational status.

Data: The market value of Meme coin WhiteWhale has rebounded to 100 million USD, and the personal holdings of The White Whale have reached 56 million USD

According to GMGN monitoring, the market capitalization of the Meme coin WhiteWhale on the Solana chain has recently continued to rise, briefly surpassing 100 million USD, currently priced at approximately 0.105 USD, with a 24-hour increase of 25%. This rise may be attributed to the recent personal purchases made by the token's prototype figure, The White Whale (associated address ECyvt...).Today, The White Whale has purchased over 2.39 million tokens of the same name, valued at about 200,000 USD, and subsequently consolidated the tokens into its main address (EBxg...). Currently, this main address holds approximately 56 million USD worth of tokens, accounting for 56% of the total supply of this Meme coin, with an unrealized profit of 17.7 million USD (30%), and an average purchase price of about 0.0213 USD, with no sales made yet.This Meme coin was initially created on October 13, 2025, on pump.fun by fans using the profile of the well-known trader The White Whale ("X:TheWhiteWhaleV2") on X and Hyperliquid. Later, due to concerns that the token could be misused and harm his reputation, The White Whale announced the proactive takeover of the project and began to accumulate a significant position.ChainCatcher reminds users that trading Meme coins is highly volatile, largely relying on market sentiment and conceptual speculation, and has no actual value or use case. Investors should be aware of the risks.

Next week's news insights: The U.S. will release the seasonally adjusted non-farm payrolls for January; Zama's public token application is officially open

According to the RootData calendar page, next week includes several important news items such as project dynamics, macroeconomic finance, token unlocks, incentive activities, and presale events. Details are as follows:February 2:ENA unlocks 11,095.31 million tokens, worth $14.5493 million, accounting for 1.394% of the circulation;2Z unlocks 13,970.07 million tokens, worth $14.5905 million, accounting for 4.022% of the circulation;Rainbow launches CCA auction on Uniswap;Zama public token application officially opens;Uniswap launches continuous clearing auction (CCA) feature on the web;The Bank of Japan publishes a summary of opinions from the January monetary policy meeting.February 3:Galaxy announces Q4 and full-year performance for 2025;Ondo holds a summit in New York and announces the latest roadmap;2027 FOMC voting member and Atlanta Fed President Bostic gives a speech;Federal Reserve Governor Bowman gives a speech.February 4:Stable upgrades mainnet, USDT0 will become the native Gas token;Eurozone January CPI year-on-year preliminary value;Eurozone January CPI month-on-month preliminary value;Eurozone December PPI month-on-month value.February 5:PROVE unlocks 50 million tokens, worth $16.6611 million, accounting for 25.655% of the circulation;Bullish releases Q4 financial performance for 2025;XION unlocks 1.6786 million tokens, worth $226.9 thousand, accounting for 2.369% of the circulation;Eurozone ECB deposit facility rate as of February 5;Eurozone ECB main refinancing rate as of February 5;2027 FOMC voting member and Atlanta Fed President Bostic participates in a dialogue and Q&A session on monetary policy.February 6:MYX unlocks 9.7222 million tokens, worth $47.3472 million, accounting for 5.092% of the circulation;BERA unlocks 63.7286 million tokens, worth $31.8024 million, accounting for 43.961% of the circulation;W unlocks 40.3185 million tokens, worth $904.1 thousand, accounting for 0.758% of the circulation;U.S. January unemployment rate;U.S. January seasonally adjusted non-farm payroll employment (in ten thousand);U.S. 2025 non-farm employment benchmark change final value (not seasonally adjusted) (in ten thousand);U.S. February one-year inflation rate expectation preliminary value.February 7:HFT unlocks 11.6942 million tokens, worth $249 thousand, accounting for 1.684% of the circulation.February 8:STABLE unlocks 88.8889 million tokens, worth $20.6509 million, accounting for 4.947% of the circulation.In addition, there is a button at the top of the RootData calendar page for generating image shares, allowing users to share important events.Risk Warning: This calendar does not constitute any investment advice.
app_icon
ChainCatcher Building the Web3 world with innovations.