BTC $78,051.08 -1.58%
ETH $2,449.52 -1.06%
BNB $696.88 -0.28%
XRP $1.37 -6.54%
SOL $95.84 -2.48%
TRX $0.3345 -2.03%
DOGE $0.0840 -5.60%
ADA $0.2037 -5.49%
BCH $260.41 -2.66%
LINK $11.21 -2.87%
HYPE $80.31 -1.21%
AAVE $122.25 -5.50%
SUI $0.7345 -6.77%
XLM $0.1787 -6.28%
ZEC $767.99 -4.80%
BTC $78,051.08 -1.58%
ETH $2,449.52 -1.06%
BNB $696.88 -0.28%
XRP $1.37 -6.54%
SOL $95.84 -2.48%
TRX $0.3345 -2.03%
DOGE $0.0840 -5.60%
ADA $0.2037 -5.49%
BCH $260.41 -2.66%
LINK $11.21 -2.87%
HYPE $80.31 -1.21%
AAVE $122.25 -5.50%
SUI $0.7345 -6.77%
XLM $0.1787 -6.28%
ZEC $767.99 -4.80%

X 平台出现冒用虚假应用获取授权绕过 2FA 的新型钓鱼攻击

2025-09-26 11:10:53

ChainCatcher 消息,近期一场高度隐蔽的钓鱼攻击利用 X 平台应用授权机制,绕过密码和双重验证,已导致多位加密领域人士账号被劫持。

攻击者通过伪装成 Google Calendar 链接的钓鱼信息,诱导用户授权恶意应用 “Calendar”,实则包含伪装字符并请求全面账号控制权限。安全专家建议受影响用户及时前往 X 的已授权应用页面,移除可疑 “Calendar” 应用以防止进一步损失。

app_icon
ChainCatcher Building the Web3 world with innovations.