ChainCatcher 消息，网络安全非营利组织 Security Alliance 警告称，他们目前每天都会发现多起由朝鲜黑客发起的诈骗企图，这些攻击通过伪造的 Zoom 会议诱骗受害者上钩。
该诈骗手法是在一场“假 Zoom 通话”中诱导受害者下载恶意软件，从而窃取包括密码和私钥在内的敏感信息。安全研究员 Taylor Monahan 警告称，这一战术已从用户手中掠走超过 3 亿美元的资产。
诈骗通常始于一个 Telegram 账号发来的消息，而该账号往往属于受害者“认识的人”。由于熟人身份，受害者会放松警惕。随后，对话会自然过渡到“通过 Zoom 叙叙旧”的邀请。一旦通话开始，黑客就会假装遇到音频问题，并发送一个所谓的“补丁文件”。当受害者打开该文件时，设备即被植入恶意软件。随后，黑客会以“改天再约”为由结束这场假通话。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.