dpr

Сообщение ChainCatcher, компания в области кибербезопасности Check Point Research обнаружила, что операция StopAndProtect использует почти 2000 взломанных сайтов WordPress для распространения вредоносного ПО, кражи данных, мониторинга жертв и развертывания программ-вымогателей. Операция была обнаружена в середине мая. По состоянию на 24 июля операция взломала более 6000 независимых IP-адресов, из которых 1852 находятся в США, а по 630 в России и Индии.Взломанные сайты также использовались для хостинга вредоносного ПО, отправки команд и хранения украденных файлов, скриншотов и журналов активности. Злоумышленники с помощью поддельного CAPTCHA заставляют пользователей Windows выполнять команды PowerShell, тем самым крадя учетные данные и мнемонические фразы криптовалютных кошельков, а также распространяют их через сеть и USB-устройства. Исследователи собрали более 31 000 скриншотов и более 700 архивов данных и полагают, что злоумышленники могли случайно заразить себя.

ChainCatcher news, reported by Cointelegraph, Ethereum community member Eugenio Reggianini proposed a privacy roadmap that suggests achieving compatibility with the EU GDPR regulations through a modular architecture and multiple privacy-enhancing technologies (PETs).The proposal includes mechanisms such as transferring personal data to the wallet and DApp edge, off-chain storage combined with metadata wiping, and cryptographic role separation, to alleviate the compliance burden on the mainnet while retaining decentralization features. Successful implementation relies on developer adoption and regulatory coordination.

ChainCatcher news, the Web3 platform TaskFi, focused on task reward mechanisms, has successfully passed a comprehensive audit by SolidProof. This audit covers key modules such as smart contract security and system architecture, providing strong assurance for the platform's security and user trust.TaskFi is an innovative Web3 platform where users can earn TSK token rewards by completing tasks, dedicated to building a decentralized task economy ecosystem. For more information, please visit the SolidProof audit page.

ChainCatcher message, BNB Chain posted on social media introducing the data trading platform MindPress based on Greenfield and BNB Smart Chain.It is reported that the platform is similar to an NFT marketplace, but the tradable items are not limited to NFTs; it also includes various digital assets such as images and videos. Developers can create storage spaces and list objects, while users can purchase access rights, supporting cross-chain operations. This platform showcases the practical application of Greenfield and simplifies the development of decentralized trading platforms.

ChainCatcher news, according to official sources, BNB Chain announced updates for BNB Greenfield V1.6 and V1.7, and also announced the launch of the MindPress data marketplace.It is reported that the marketplace aims to simplify and enhance the user experience on decentralized trading platforms, providing users with seamless network operations, flexible payment options, and more, utilizing the latest features of Greenfield V1.6 and V1.7.

ChainCatcher news, according to The Block, a statement claims that Worldcoin will suspend its activities in Spain until the end of this year, or until the German organization responsible for overseeing the project's activities under the EU General Data Protection Regulation (GDPR) completes its audit.

ChainCatcher message, recently attackers have exploited vulnerabilities in WordPress plugins to attack normal sites, injecting malicious js code into the sites, launching watering hole attacks that pop up malicious windows when users visit the site, tricking users into executing malicious code or signing Web3 wallets, thereby stealing users' assets.It is recommended that sites using WordPress plugins check for vulnerabilities, update plugins in a timely manner to avoid being attacked; users should carefully identify the downloaded programs and the content of Web3 signatures when visiting any site to avoid downloading malicious programs or authorizing malicious signatures that could lead to asset theft.

ChainCatcher news, the DFINITY Foundation announced the launch of a European subnet on the Internet Computer (ICP), providing infrastructure for decentralized applications (dApps) that comply with the General Data Protection Regulation (GDPR). This new infrastructure will enable developers to launch dApps in the European market that protect personal and financial data, adhering to strict and established regulatory practices. Additionally, there are two upcoming features on the Internet Computer that will allow developers to further enhance the privacy and security of user data under the GDPR and the European subnet's specifications: VetKeys will enable distributed decryption, and AMD SEV-SNP aims to protect boundary node virtual machines (VMs). The launch of the European subnet follows the approval of three proposals submitted by DFINITY to the NNS, with 99% of participating ICP token holders supporting these proposals. The European subnet is now live and open to developers in the EU, who can build GDPR-compliant dApps on this foundation.

ChainCatcher news, the blockchain security audit company SolidProof officially stated that in response to the Rug Pull incident of the DeFi project Kannagi Finance on zkSync Era, it has collaborated with Kyber Network to establish a special task force to thoroughly investigate the situation.SolidProof stated that it did not audit the Vault contract related to this incident, which was audited by SolidityFinance.ChainCatcher previously reported that according to DeFiLlama data and community feedback, the DeFi project Kannagi Finance on zkSync Era experienced a Rug Pull, and its official Twitter account has been deactivated.