Odaily星球日报讯 网络安全公司 Koi Security 披露，名为 GreedyBear 的黑客组织通过三管齐下的攻击手段窃取超 100 万美元加密货币。该组织采用浏览器扩展、恶意软件和诈骗网站组合攻击模式，已部署超 650 个恶意工具。技术细节显示，攻击者在 Firefox 商店发布 150 余个仿冒 MetaMask 等热门钱包的恶意扩展程序，采用“扩展程序掏空”技术先通过审核再植入恶意代码。同时分发近 500 个加密货币主题恶意软件样本，主要通过俄罗斯盗版软件网站传播。此外还建立冒充硬件钱包等产品的专业诈骗网站网络。
值得注意的是，所有攻击通过单一 IP 服务器集中控制，部分代码显示使用 AI 生成以实现快速迭代。网络安全专家警告称，这标志着加密货币网络犯罪已进入工业化新阶段，呼吁应用商店加强审核机制。(Cointelegraph)
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.