word

Công ty an ninh blockchain SlowMist, Giám đốc An ninh Thông tin 23pds cho biết, kẻ tấn công đang lợi dụng lỗ hổng Darksword, thông qua Safari để vượt qua cơ chế an ninh iOS, kiểm soát thiết bị và trích xuất khóa riêng cùng các dữ liệu khác từ ví tiền điện tử tự quản. Lỗ hổng này đã được sử dụng để tấn công người dùng ở Ả Rập Saudi, Thổ Nhĩ Kỳ, Malaysia và Ukraine. Nhóm Tình báo Đe dọa Google trước đó đã tiết lộ, Darksword ban đầu chỉ ảnh hưởng đến các phiên bản iOS từ 18.4 đến 18.7.23pds cho biết, kẻ tấn công đã điều chỉnh nó cho iOS 26.5, nhưng đánh giá này vẫn chưa được xác nhận chính thức. Cuộc tấn công thường bắt đầu từ kỹ thuật xã hội, khi người dùng nhấp vào liên kết độc hại được gửi qua mạng xã hội hoặc ứng dụng giao tiếp, thiết bị có thể bị lấy quyền Root và trích xuất dữ liệu ví. Người dùng nên kịp thời cập nhật hệ thống điện thoại, tránh truy cập vào các liên kết trang web do người lạ gửi; ba nhà đầu tư khác đã mất gần 1,8 triệu đô la Bitcoin do tải xuống ứng dụng ví giả từ App Store chính thức của Apple và đã kiện Apple.

Theo thông tin từ đội ngũ an ninh Slow Mist, họ đã phát hiện một hoạt động tấn công giả mạo dịch vụ VPS miễn phí, nhắm vào trình duyệt Safari trên iPhone chạy phiên bản iOS 18.4 đến 18.6.2.Kẻ tấn công đã lợi dụng sáu lỗ hổng mang mã DarkSword để hình thành chuỗi tấn công hoàn chỉnh, bao gồm thực thi mã từ xa WebKit, thoát khỏi sandbox và đọc/ghi kernel, có thể lấy được tệp container ứng dụng và dữ liệu chuỗi khóa mà người dùng không hề hay biết, đồng thời ghi lại các đầu vào từ bàn phím khi các ví như imToken, TokenPocket hoặc TronLink đang ở chế độ nền.Đội ngũ Slow Mist cho biết, sáu lỗ hổng trên hiện đã được Apple khắc phục, và cuộc tấn công hiện tại thuộc về việc tái sử dụng chuỗi lỗ hổng n-day. Chỉ việc truy cập vào trang web độc hại không thể chứng minh trực tiếp rằng cụm từ ghi nhớ hoặc khóa riêng đã bị đánh cắp, vẫn cần phải xác minh thông qua việc thu thập chứng cứ từ thiết bị. Khuyến nghị người dùng iOS/iPadOS nhanh chóng nâng cấp hệ thống lên phiên bản 18.7.3 hoặc 26.3 trở lên.

Tin tức từ ChainCatcher, công ty an ninh mạng Check Point Research phát hiện, chiến dịch ransomware StopAndProtect lợi dụng gần 2000 trang web WordPress bị xâm nhập để phát tán phần mềm độc hại, đánh cắp dữ liệu, giám sát nạn nhân và triển khai ransomware. Chiến dịch này được phát hiện vào giữa tháng 5. Tính đến ngày 24 tháng 7, chiến dịch đã xâm nhập hơn 6000 địa chỉ IP độc lập, trong đó có 1852 địa chỉ ở Mỹ, 630 địa chỉ ở Nga và 630 địa chỉ ở Ấn Độ.Các trang web bị xâm nhập còn được sử dụng để lưu trữ phần mềm độc hại, gửi lệnh và lưu trữ các tệp bị đánh cắp, ảnh chụp màn hình và nhật ký hoạt động. Kẻ tấn công đã dụ dỗ người dùng Windows chạy lệnh PowerShell thông qua CAPTCHA giả, từ đó đánh cắp thông tin xác thực và cụm từ khôi phục ví tiền điện tử, và phát tán qua mạng cũng như thiết bị USB. Các nhà nghiên cứu đã thu thập được hơn 31.000 ảnh chụp màn hình và hơn 700 gói dữ liệu nén, và cho rằng kẻ tấn công có thể đã vô tình lây nhiễm chính mình.

According to Jinshi reports, Federal Reserve's Musalem stated on Thursday that, like several Federal Reserve decision-makers last month, he believes the phrase "accommodative stance" should be removed from the post-meeting statement to create the possibility for interest rate hikes. He supports this interest rate decision and believes that the accommodative stance no longer aligns with the economic outlook and risk balance.

According to GMGN data, the top 5 tokens with net inflow of KOL in the past 24 hours are as follows:My Sword and Shield (6iA7....ump): Net inflow of $3,000, with a 24-hour increase of -29.9%, currently priced at $0.0009.42069K (Be78....ump): Net inflow of $2,000, with a 24-hour increase of 25%, currently priced at $0.0002.FISH2 (7swL....ump): Net inflow of $1,000, with a 24-hour increase of 1855%, currently priced at $0.0002.BFM (EvDk....ump): Net inflow of $430, with a 24-hour increase of 331.9%, currently priced at $0.0001.ZePIN (61ua....ash): Net inflow of $355, with a 24-hour increase of 780.5%, currently priced at $0.0001.

The slow fog余弦 social media stated that the high-risk iOS attack framework DarkSword has been publicly leaked on channels such as GitHub and is being used for large-scale espionage attacks targeting cryptocurrency wallet holders.This attack program targets devices running iOS versions 18.4 to 18.7, utilizing vulnerabilities in the Safari browser through malicious web pages to achieve remote code execution, thereby stealing users' sensitive data. Attackers launch attacks using bait web pages that impersonate pornographic live streams, Tron energy stations, refund processes, and more.iPhone users running older versions of iOS, once they access such web pages using the Safari browser (even if they do not close the page), may have sensitive information such as plaintext private keys and mnemonic phrases stolen by malicious JavaScript code when unlocking the wallet app, which is then transmitted in real-time through channels like Telegram bots.

According to Jinshi reports, Boston Fed President Collins stated that she supports the decision to keep interest rates unchanged but hopes to adjust the wording of the statement to avoid implying a rate cut. She pointed out that an increasing number of officials want the Fed to clearly signal that the next action could be either a rate cut or a rate hike. Collins emphasized that interest rates may remain unchanged for a "longer period" and is focused on the persistence of inflation, believing that policymakers need to reassess the appropriate policy.

The Department of Homeland Security's official account pointed out that "token scams" are emerging one after another, especially illegal financial activities such as "holding tokens to get rich" and "making profits from off-exchange trading," which may be exploited by foreign espionage and intelligence agencies to harm national economic security. In the face of new technologies and applications, we must actively embrace and effectively utilize them while also preventing risks and ensuring safety, including risks of leakage and hijacking, risks of forgery and tampering, and risks of fraud traps.In the face of the token craze, we must view its value rationally, pay attention to information security and privacy security, and enhance our awareness of safety precautions, ensuring that we understand tokens and use them wisely.

The Chief Information Security Officer of Slow Fog Technology, 23pds, posted on platform X reminding all users to update their iOS systems in a timely manner. The DarkSword attack program has been leaked, and its core capability is: to extract forensic-level data from iOS devices via HTTP interfaces.In actual attacks, attackers can use social engineering or watering hole attacks to lure users into falling victim, thereby stealing data from iPhones/iPads and uploading it to servers controlled by the attackers.

According to Decrypt, cybersecurity company Malwarebytes Labs has warned that a fake website impersonating the newly released game Pudgy World from Pudgy Penguins is attempting to steal cryptocurrency wallet passwords.The phishing site pudgypengu-gamegifts[.]live uses a highly realistic replica of a cryptocurrency wallet interface to deceive users. When visitors select a wallet on this fake site, a seemingly authentic wallet unlock interface is displayed, leading users to mistakenly believe it is a trustworthy cryptocurrency wallet software.Malwarebytes points out that the timing of this phishing campaign appears to be carefully planned, coinciding with the game's launch and a surge of new users, and the attack almost covers all mainstream wallets, indicating that it may be backed by well-resourced threat actors or using commercial phishing toolkits. Users are advised to access the official website only through trusted bookmarks, avoid clicking on social media links, and be cautious of wallet password prompts that appear on web pages.

According to GMGN monitoring, the Solana ecosystem Meme coin "My Sword and Shield" has seen its market cap rise from $1.8 million to a peak of $6.6 million, currently reported at $5.6 million, with a 24-hour increase of 240% and a trading volume of approximately $4.9 million during the same period. The token has been online for 6 days. It is the first Chinese narrative Meme coin on the Solana chain to exceed a market cap of one million dollars recently.On-chain trader Cowboy purchased $740 worth of this Meme coin when its market cap was around $290,000, and the current floating return rate has reached 1900%. After selling part of his holdings, the current total profit is approximately $7,930. The similarly named Meme coin "My Sword and Shield" on the BSC chain recorded an increase of about 57% in 24 hours, with a market cap of only $500,000 and a trading volume of approximately $360,000, having been online for about 28 days.ChainCatcher reminds users that trading Meme coins is highly volatile, largely relying on market sentiment and speculative hype, and has no actual value or use case. Investors should be aware of the risks.

According to GMGN data, the top 5 tokens by net inflow of KOL in the past 24 hours are as follows:My Sword and Shield (6iA7....ump): Net inflow of $20,000, with a 24-hour increase of 213.2%, currently priced at $0.0055.WhiteHouse (7oXN....ump): Net inflow of $10,000, with a 24-hour increase of 24795.7%, currently priced at $0.0007.CAINE (Asho....ump): Net inflow of $2,000, with a 24-hour increase of 4294.1%, currently priced at $0.0002.WhiteHouse (9MBc....onk): Net inflow of $2,000, with a 24-hour decrease of -9.5%, currently priced at $0.0001.MIM (CE3K....ump): Net inflow of $780, with a 24-hour increase of 21.8%, currently priced at $0.0001.

According to official news, Tether has released an open-source password manager PearPass, which uses end-to-end encryption and peer-to-peer device synchronization, allowing recovery with user keys. All credentials are stored locally, without going through the cloud or servers.The official statement claims that it has passed an independent security audit by Secfault Security and supports free cross-platform use.

Binance co-CEO He Yi posted on social media that his personal WeChat account has been recovered. He currently suspects that the perpetrator continues to add him as a friend under the pretense of providing feedback and seeking help, using external verification to change the password.

According to Jinshi, this week's Federal Reserve meeting is expected to be one of the most controversial in years, with investors focusing on the degree of disagreement among decision-makers regarding interest rate cuts, as well as Powell's signals about the future path. Janus Henderson believes that the December meeting will have little impact on the market, and there may be volatility in the short term. Wilmington Trust points out that the market has largely priced in the rate cut action, with the key being the Federal Reserve's policy guidance. Nomura economists indicate that the market is underestimating the risk of the Federal Reserve choosing not to cut rates in December, and the number of dissenting votes will reveal decision-making independence.

According to a report by Caijing Magazine, the main suspect in the laundering case involving 60,000 BTC, Qian Zhimin, escaped with a laptop that has a built-in cryptocurrency wallet. After several searches by the British police, multiple electronic devices, including phones, computers, and USB drives, were seized. One of the USB drives contained photos of pages from Qian Zhimin's notebook, while the relevant pages of the notebook were suspected to have been torn out before the police confiscated them.The photos of the pages recorded the startup password for the black computer and several mnemonic phrases, such as "number + love," and also included hints for the numbers, which made it possible to recover the previously seized bitcoins.

China News Weekly published an article titled "Can the 40 Billion Bitcoin Taken by Qian Zhimin Be Returned to China?" which pointed out that the main suspect in the laundering case involving 60,000 bitcoins, Qian Zhimin, had purchased a total of 194,951 bitcoins, exceeding the 61,000 bitcoins identified by the police. However, the court did not disclose the situation regarding the remaining more than 120,000 bitcoins, indicating that it is highly likely that there are still undiscovered or unseized bitcoins in Qian Zhimin's assets.Detective Joe Ryan from the London Metropolitan Police revealed that Qian Zhimin claimed that he had "lost the password" to a wallet containing 20,000 bitcoins. According to the latest exchange rate, just these "lost" bitcoins are worth approximately 12.5 billion yuan.

ChainCatcher message, He Yi posted on social media, "Zhao Changpeng does not use WeChat, someone is impersonating Zhao Changpeng to commit fraud, please spread the word."