windows

ChainCatcher сообщает, что, согласно информации от Bloomberg, Министерство государственной безопасности Китая недавно потребовало от некоторых правительственных учреждений удалить операционную систему Windows 10 для правительства Шэньчжоу Ван Синь, что привело к тому, что план прекращения поддержки, запланированный на февраль 2027 года, был перенесен на несколько месяцев вперед. Эта операционная система была разработана совместным предприятием Microsoft и Китайской электронной научно-технической группы Шэньчжоу Ван Синь, основанным в 2016 году, с целью обеспечения соответствия Windows 10 требованиям безопасности правительства Китая.Сообщается, что новые указания появились всего за несколько недель до запланированной встречи лидеров Китая и США, что стало неожиданностью для некоторых сотрудников правительственных учреждений. Поскольку Китай постепенно исключает зарубежные технологические продукты из белого списка государственных закупок, это преждевременное прекращение использования еще больше уменьшит зависимость от американских технологий. Шэньчжоу Ван Синь пока не сделала публичного комментария по этому поводу.

Сообщение ChainCatcher, Microsoft Security Blog сообщает, что команда безопасности Microsoft обнаружила новый тип троянца для кражи криптовалюты под названием Crypto Clipper. Это вредоносное ПО активно с февраля 2026 года и в основном распространяется через USB-устройства, заражая пользователей Windows с помощью вредоносных .lnk ярлыков. Crypto Clipper имеет встроенный Tor-клиент, который подключается к скрытым сервисам .onion через локальный SOCKS5 прокси, обеспечивая скрытую C2 связь. Его основные функции включают высокочастотный мониторинг буфера обмена, кражу мнемонических фраз и приватных ключей, замену адресов перевода криптовалюты, захват скриншотов и их загрузку, а также получение команд на выполнение удаленного кода.Microsoft сообщает, что это вредоносное ПО обладает способностью к распространению как червь, автоматически скрывает оригинальные документы на USB-накопителе и создает вредоносные ярлыки с тем же именем, одновременно создавая запланированные задачи для обеспечения постоянного контроля. Исследователи классифицировали его как Trojan:Win32/CryptoBandits.A и рекомендуют пользователям отключить автоматический запуск съемных устройств, ограничить права выполнения скриптов и внимательно следить за трафиком Tor-прокси на localhost:9050 и аномальным доступом к буферу обмена.

Hackers are stealing cryptocurrency users' assets by placing fake Windows 11 update ads on Facebook. These ads use professional Microsoft branding and, when clicked by users, lead to a cloned Microsoft website where malware is subsequently downloaded.The malware installs a framework called "LunarApplication" on the victim's computer, specifically designed to steal cryptocurrency wallet seed phrases, login credentials, and other sensitive information. Hackers use geofencing technology to bypass data center IP addresses, preventing automated scanners from detecting the attack.

ChainCatcher message, according to Jinshi reports, recently, the Japanese security team CSIRT revealed a security vulnerability in WinRAR that can bypass Microsoft's Windows Mark of the Web (MoTW) security mechanism, potentially allowing users to unknowingly execute malicious programs from the internet, posing serious security risks. This vulnerability is numbered CVE-2025-31334.To actively respond to the cybersecurity challenges posed by the WinRAR security vulnerability to our critical infrastructure, it is recommended to take the following measures from a technical perspective: first, conduct a comprehensive inspection of network devices in WinRAR user environments that are affected by this vulnerability and promptly install the latest version. Second, perform a reset of WinRAR client configurations. Third, it is advised that WinRAR users avoid connecting to untrusted networks when handling sensitive data.

ChainCatcher news, according to Cointelegraph, cybersecurity solution provider Check Point Research has discovered a new malware called Styx Stealer. This malware can steal a large amount of data through a mechanism known as "cutting," including cryptocurrency.The malware can be rented for free on the developer's website, and because it relies on a vulnerability in Microsoft Windows Defender that was patched last year, Windows users with the latest operating systems will not be affected by this malware.Check Point Research identified eight wallets that are believed to belong to the Turkish Styx Stealer developer, who received approximately $9,500 in cryptocurrency as payment during the first two months of the malware's operation. Styx Stealer was launched in April, charging $75 per month and $350 for a lifetime subscription.

ChainCatcher news, according to Microsoft's official page, a serious security vulnerability has recently been disclosed in the Windows system, identified as CVE-2024-38063. This vulnerability affects all supported versions of Windows, including Windows 11, Windows 10, and several versions of Windows Server. The CVSS3.1 score for the vulnerability is 9.8, categorized as "critical." Attackers can remotely compromise devices and execute arbitrary code through specially crafted IPv6 packets. The vulnerability exists in the TCP/IP network stack of Windows and is a serious remote code execution flaw. Attackers can trigger the vulnerability and execute code remotely by repeatedly sending specially crafted IPv6 packets to Windows devices, without requiring user interaction or authentication. Microsoft strongly recommends that all users update to the latest version of Windows as soon as possible. Microsoft is releasing related patches to fix this vulnerability, and disabling IPv6 can temporarily prevent the exploitation of the vulnerability.

ChainCatcher news, Vitalik Buterin believes that Linux is the perfect solution to the Windows operating system problems faced by Musk, as Linux is open source. He invited Musk to join the desktop Linux community.It is reported that Linux is an operating system that was first released in 1991 and is currently very popular. The source code of open source software is available for anyone to view, modify, and improve. Some have praised Buterin for promoting open source software, while others have pointed out that Linux may not be suitable for Musk's needs.

ChainCatcher message, according to community reports, several members of the crypto community have reported that their private keys have been stolen, with speculation suggesting that this situation is due to the use of the Bit Finger browser.In response, the official Bit Finger browser stated in the community that certain versions of WPS For Windows have a remote code execution vulnerability, which attackers can exploit to execute arbitrary code on the victim's target host, taking control of the host, etc.Currently known affected versions include WPS Office 2023 Personal Edition below 12.1.0.15120 (inclusive), and WPS Office Institutional Editions (such as Professional Edition, Professional Enhanced Edition) below 11.8.2.12055 (inclusive).This vulnerability is relatively easy to trigger, and users may have already been attacked by hackers after clicking on unknown links.

ChainCatcher news, Windows media classic player Winamp has announced the release of a new version V 5.9.1, which will support music NFTs on the Ethereum and Polygon chains. Music enthusiasts can link their Metamask wallets to Winamp through Brave, Chrome, or Firefox browsers, supporting audio and video files based on the Ethereum and Polygon blockchains that adhere to the ERC-721 and ERC-1155 standards. (source link)