Linux用户需注意Snap Store上新型攻击,黑客可接管开发者身份诱导用户提交助记词

Blockbeats
Jan 21

BlockBeats 消息,1 月 21 日,慢雾 CISO 23pds 在社交媒体上发文表示,Linux 用户需要注意,Snap Store 爆发新型攻击,过期域名变黑客后门盗取用户加密资产。篡改的应用伪装成 Exodus、Ledger Live 或 Trust Wallet 等知名加密钱包,诱导用户输入“钱包恢复助记词”,导致资金被盗。

据悉,目前攻击者转而监控 Snap 商店中关联域名已过期的开发者账号。一旦发现目标域名失效,攻击者便立即将其注册,随后利用该域名的邮箱在 Snap Store 触发密码重置,从而接管已建立长期信誉的发布者身份。

23pds 解释称,这意味着用户几年前安装且一直信任的合法软件,可能在一夜之间被黑客通过官方更新通道植入恶意代码。目前已确认 storewise[.]tech 和 vagueentertainment[.]com 两个发布者域名通过此方法遭劫持。被篡改的应用通常会伪装成 Exodus、Ledger Live 或 Trust Wallet 等知名加密钱包,其界面与正版几乎没有差别。

应用启动后会先连接远程服务器验证网络,随即诱导用户输入“钱包恢复助记词”。用户一旦提交,这些敏感信息会即刻传至攻击者服务器,导致资金被盗。由于利用了旧有的信任关系,此类攻击往往在受害者察觉前就已得手。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10