word

Компания по безопасности блокчейна SlowMist, главный специалист по информационной безопасности 23pds, заявил, что злоумышленники используют уязвимость Darksword для обхода механизмов безопасности iOS через Safari, контролируя устройства и извлекая приватные ключи и другие данные из управляемых криптокошельков. Эта уязвимость ранее использовалась для атак на пользователей из Саудовской Аравии, Турции, Малайзии и Украины. Группа по угрозам Google Threat Intelligence ранее сообщила, что Darksword изначально затрагивала только версии iOS с 18.4 до 18.7.23pds сообщил, что злоумышленники адаптировали ее для iOS 26.5, но это утверждение еще не получило официального подтверждения. Атаки обычно начинаются с социальной инженерии: пользователи нажимают на вредоносные ссылки, отправленные через социальные сети или приложения для общения, после чего устройство может получить Root-доступ и извлечь данные кошелька. Пользователи должны своевременно обновлять операционную систему телефона и избегать посещения веб-сайтов, ссылки на которые отправляют незнакомцы; еще трое инвесторов потеряли почти 1,8 миллиона долларов в биткойнах из-за загрузки поддельных приложений для кошельков из официального App Store Apple и подали в суд на Apple.

Согласно информации от команды SlowMist, было зафиксировано нападение, замаскированное под бесплатный VPS-сервис, нацеленное на браузер Safari на iPhone с версиями iOS от 18.4 до 18.6.2.Злоумышленники использовали шесть уязвимостей, получивших кодовое название DarkSword, чтобы сформировать полную цепочку атак, охватывающую удаленное выполнение кода WebKit, побег из песочницы и чтение/запись в ядре, что позволяет без ведома пользователя получать файлы контейнеров приложений и данные ключей, а также записывать ввод с клавиатуры, когда такие кошельки, как imToken, TokenPocket или TronLink, находятся на переднем плане.Команда SlowMist сообщила, что все шесть уязвимостей в настоящее время были исправлены Apple, и текущее нападение является повторным использованием цепочки уязвимостей n-day. Простое посещение вредоносной страницы не может напрямую подтвердить, что мнемоническая фраза или приватный ключ были украдены, и необходимо провести подтверждение с помощью судебной экспертизы устройства. Рекомендуется пользователям iOS/iPadOS как можно скорее обновить систему до версии 18.7.3 или 26.3 и выше.

Сообщение ChainCatcher, компания в области кибербезопасности Check Point Research обнаружила, что операция StopAndProtect использует почти 2000 взломанных сайтов WordPress для распространения вредоносного ПО, кражи данных, мониторинга жертв и развертывания программ-вымогателей. Операция была обнаружена в середине мая. По состоянию на 24 июля операция взломала более 6000 независимых IP-адресов, из которых 1852 находятся в США, а по 630 в России и Индии.Взломанные сайты также использовались для хостинга вредоносного ПО, отправки команд и хранения украденных файлов, скриншотов и журналов активности. Злоумышленники с помощью поддельного CAPTCHA заставляют пользователей Windows выполнять команды PowerShell, тем самым крадя учетные данные и мнемонические фразы криптовалютных кошельков, а также распространяют их через сеть и USB-устройства. Исследователи собрали более 31 000 скриншотов и более 700 архивов данных и полагают, что злоумышленники могли случайно заразить себя.

According to Jinshi reports, Federal Reserve's Musalem stated on Thursday that, like several Federal Reserve decision-makers last month, he believes the phrase "accommodative stance" should be removed from the post-meeting statement to create the possibility for interest rate hikes. He supports this interest rate decision and believes that the accommodative stance no longer aligns with the economic outlook and risk balance.

According to GMGN data, the top 5 tokens with net inflow of KOL in the past 24 hours are as follows:My Sword and Shield (6iA7....ump): Net inflow of $3,000, with a 24-hour increase of -29.9%, currently priced at $0.0009.42069K (Be78....ump): Net inflow of $2,000, with a 24-hour increase of 25%, currently priced at $0.0002.FISH2 (7swL....ump): Net inflow of $1,000, with a 24-hour increase of 1855%, currently priced at $0.0002.BFM (EvDk....ump): Net inflow of $430, with a 24-hour increase of 331.9%, currently priced at $0.0001.ZePIN (61ua....ash): Net inflow of $355, with a 24-hour increase of 780.5%, currently priced at $0.0001.

The slow fog余弦 social media stated that the high-risk iOS attack framework DarkSword has been publicly leaked on channels such as GitHub and is being used for large-scale espionage attacks targeting cryptocurrency wallet holders.This attack program targets devices running iOS versions 18.4 to 18.7, utilizing vulnerabilities in the Safari browser through malicious web pages to achieve remote code execution, thereby stealing users' sensitive data. Attackers launch attacks using bait web pages that impersonate pornographic live streams, Tron energy stations, refund processes, and more.iPhone users running older versions of iOS, once they access such web pages using the Safari browser (even if they do not close the page), may have sensitive information such as plaintext private keys and mnemonic phrases stolen by malicious JavaScript code when unlocking the wallet app, which is then transmitted in real-time through channels like Telegram bots.

According to Jinshi reports, Boston Fed President Collins stated that she supports the decision to keep interest rates unchanged but hopes to adjust the wording of the statement to avoid implying a rate cut. She pointed out that an increasing number of officials want the Fed to clearly signal that the next action could be either a rate cut or a rate hike. Collins emphasized that interest rates may remain unchanged for a "longer period" and is focused on the persistence of inflation, believing that policymakers need to reassess the appropriate policy.

The Department of Homeland Security's official account pointed out that "token scams" are emerging one after another, especially illegal financial activities such as "holding tokens to get rich" and "making profits from off-exchange trading," which may be exploited by foreign espionage and intelligence agencies to harm national economic security. In the face of new technologies and applications, we must actively embrace and effectively utilize them while also preventing risks and ensuring safety, including risks of leakage and hijacking, risks of forgery and tampering, and risks of fraud traps.In the face of the token craze, we must view its value rationally, pay attention to information security and privacy security, and enhance our awareness of safety precautions, ensuring that we understand tokens and use them wisely.

The Chief Information Security Officer of Slow Fog Technology, 23pds, posted on platform X reminding all users to update their iOS systems in a timely manner. The DarkSword attack program has been leaked, and its core capability is: to extract forensic-level data from iOS devices via HTTP interfaces.In actual attacks, attackers can use social engineering or watering hole attacks to lure users into falling victim, thereby stealing data from iPhones/iPads and uploading it to servers controlled by the attackers.

According to Decrypt, cybersecurity company Malwarebytes Labs has warned that a fake website impersonating the newly released game Pudgy World from Pudgy Penguins is attempting to steal cryptocurrency wallet passwords.The phishing site pudgypengu-gamegifts[.]live uses a highly realistic replica of a cryptocurrency wallet interface to deceive users. When visitors select a wallet on this fake site, a seemingly authentic wallet unlock interface is displayed, leading users to mistakenly believe it is a trustworthy cryptocurrency wallet software.Malwarebytes points out that the timing of this phishing campaign appears to be carefully planned, coinciding with the game's launch and a surge of new users, and the attack almost covers all mainstream wallets, indicating that it may be backed by well-resourced threat actors or using commercial phishing toolkits. Users are advised to access the official website only through trusted bookmarks, avoid clicking on social media links, and be cautious of wallet password prompts that appear on web pages.

According to GMGN monitoring, the Solana ecosystem Meme coin "My Sword and Shield" has seen its market cap rise from $1.8 million to a peak of $6.6 million, currently reported at $5.6 million, with a 24-hour increase of 240% and a trading volume of approximately $4.9 million during the same period. The token has been online for 6 days. It is the first Chinese narrative Meme coin on the Solana chain to exceed a market cap of one million dollars recently.On-chain trader Cowboy purchased $740 worth of this Meme coin when its market cap was around $290,000, and the current floating return rate has reached 1900%. After selling part of his holdings, the current total profit is approximately $7,930. The similarly named Meme coin "My Sword and Shield" on the BSC chain recorded an increase of about 57% in 24 hours, with a market cap of only $500,000 and a trading volume of approximately $360,000, having been online for about 28 days.ChainCatcher reminds users that trading Meme coins is highly volatile, largely relying on market sentiment and speculative hype, and has no actual value or use case. Investors should be aware of the risks.

According to GMGN data, the top 5 tokens by net inflow of KOL in the past 24 hours are as follows:My Sword and Shield (6iA7....ump): Net inflow of $20,000, with a 24-hour increase of 213.2%, currently priced at $0.0055.WhiteHouse (7oXN....ump): Net inflow of $10,000, with a 24-hour increase of 24795.7%, currently priced at $0.0007.CAINE (Asho....ump): Net inflow of $2,000, with a 24-hour increase of 4294.1%, currently priced at $0.0002.WhiteHouse (9MBc....onk): Net inflow of $2,000, with a 24-hour decrease of -9.5%, currently priced at $0.0001.MIM (CE3K....ump): Net inflow of $780, with a 24-hour increase of 21.8%, currently priced at $0.0001.

According to official news, Tether has released an open-source password manager PearPass, which uses end-to-end encryption and peer-to-peer device synchronization, allowing recovery with user keys. All credentials are stored locally, without going through the cloud or servers.The official statement claims that it has passed an independent security audit by Secfault Security and supports free cross-platform use.

Binance co-CEO He Yi posted on social media that his personal WeChat account has been recovered. He currently suspects that the perpetrator continues to add him as a friend under the pretense of providing feedback and seeking help, using external verification to change the password.

According to Jinshi, this week's Federal Reserve meeting is expected to be one of the most controversial in years, with investors focusing on the degree of disagreement among decision-makers regarding interest rate cuts, as well as Powell's signals about the future path. Janus Henderson believes that the December meeting will have little impact on the market, and there may be volatility in the short term. Wilmington Trust points out that the market has largely priced in the rate cut action, with the key being the Federal Reserve's policy guidance. Nomura economists indicate that the market is underestimating the risk of the Federal Reserve choosing not to cut rates in December, and the number of dissenting votes will reveal decision-making independence.

According to a report by Caijing Magazine, the main suspect in the laundering case involving 60,000 BTC, Qian Zhimin, escaped with a laptop that has a built-in cryptocurrency wallet. After several searches by the British police, multiple electronic devices, including phones, computers, and USB drives, were seized. One of the USB drives contained photos of pages from Qian Zhimin's notebook, while the relevant pages of the notebook were suspected to have been torn out before the police confiscated them.The photos of the pages recorded the startup password for the black computer and several mnemonic phrases, such as "number + love," and also included hints for the numbers, which made it possible to recover the previously seized bitcoins.

China News Weekly published an article titled "Can the 40 Billion Bitcoin Taken by Qian Zhimin Be Returned to China?" which pointed out that the main suspect in the laundering case involving 60,000 bitcoins, Qian Zhimin, had purchased a total of 194,951 bitcoins, exceeding the 61,000 bitcoins identified by the police. However, the court did not disclose the situation regarding the remaining more than 120,000 bitcoins, indicating that it is highly likely that there are still undiscovered or unseized bitcoins in Qian Zhimin's assets.Detective Joe Ryan from the London Metropolitan Police revealed that Qian Zhimin claimed that he had "lost the password" to a wallet containing 20,000 bitcoins. According to the latest exchange rate, just these "lost" bitcoins are worth approximately 12.5 billion yuan.

ChainCatcher message, He Yi posted on social media, "Zhao Changpeng does not use WeChat, someone is impersonating Zhao Changpeng to commit fraud, please spread the word."