virus

Cựu ứng cử viên tổng thống Đảng Dân chủ Mỹ, người sáng lập Noble Mobile, Andrew Yang kêu gọi chính phủ liên bang tăng cường giám sát các phòng thí nghiệm AI tiên tiến. Trong một cuộc phỏng vấn với CNBC, ông cho biết các nhà nghiên cứu cảnh báo rằng tốc độ phát triển của các mô hình mạnh đã vượt quá giới hạn của các quy định hiện có, và thẳng thắn nói rằng "nỗi sợ hãi là có thật, lo lắng là có thật, và nhu cầu cũng là có thật, người dân Mỹ muốn thấy ngành này được quản lý."Andrew Yang kêu gọi Quốc hội yêu cầu các công ty AI chịu trách nhiệm về thiệt hại, thiết lập thời gian chờ trước khi triển khai, và trang bị "công tắc tiêu diệt" cho các mô hình mạnh. Ông đề cập rằng OpenAI và Anthropic gần đây đã tiết lộ các sự kiện thử nghiệm mô hình vượt giới hạn hoặc xâm nhập vào hệ thống của các công ty khác, do đó các nhà lập pháp đang chuẩn bị giới thiệu "Dự luật Công tắc Tiêu diệt AI", cho phép các quan chức liên bang ra lệnh hạn chế hoặc đóng cửa các hệ thống tiên tiến cụ thể.Đối với tuyên bố của David Sacks rằng cảnh báo an toàn AI là "chiến tranh tâm lý", Andrew Yang cho biết nhiều vấn đề đang xảy ra đồng thời, và trích dẫn cảnh báo của một người đứng đầu phòng thí nghiệm không được nêu tên rằng, robot AI có thể đã cài đặt mã tự sao chép trên internet, khiến OpenAI và Anthropic phải xây dựng một internet tổng hợp để đào tạo mô hình. Ông cũng nhấn mạnh rằng việc quản lý AI là một vấn đề của cả hai đảng, "nếu bạn ở vùng nông thôn hoặc khu vực bầu cử đỏ, cử tri của bạn cũng cảm thấy hoảng sợ về AI."

ChainCatcher thông báo, theo báo cáo của CCTV, gần đây, Trung tâm Xử lý Khẩn cấp Virus Máy tính Quốc gia và Phòng thí nghiệm Kỹ thuật Quốc gia về Phòng chống Virus Máy tính dựa trên Nền tảng Phân tích Hợp tác Virus Máy tính Quốc gia (https://virus.cverc.org.cn) đã phát hiện nhiều sự kiện người dùng bị tấn công bởi virus mã hóa "Sorry" trong lãnh thổ của chúng ta. Sau khi các tệp quan trọng của người dùng bị mã hóa, tên tệp sẽ được thay đổi thành tên tệp gốc + chuỗi đuôi .sorry, kẻ tấn công còn để lại thư đòi tiền trên máy chủ của người dùng, yêu cầu người dùng tải xuống công cụ liên lạc mã hóa để liên lạc với họ.

According to Hackread.com, cybersecurity company Hudson Rock discovered an infected device while analyzing a LummaC2 information-stealing malware log, with the operator suspected to be a malware developer from a North Korean state-sponsored hacking group.The device was used to build the infrastructure supporting the $1.4 billion theft from the cryptocurrency exchange Bybit in February 2025. Analysis indicated that the credentials found on the device were linked to domains registered prior to the attack, which were used to impersonate Bybit. The device itself was high-end, equipped with development tools such as Visual Studio and Enigma Protector, as well as communication and data storage applications like Astrill VPN, Slack, and Telegram. Its activity traces also showed that the attackers purchased relevant domain names and prepared fake Zoom installers to carry out phishing attacks. This finding rarely reveals the internal operational details of asset sharing in North Korean-supported hacking activities.

According to Cointelegraph, a worm virus targeting WhatsApp is spreading in Brazil, which infects phones and implants the Eternidade Stealer Trojan, capable of stealing access to cryptocurrency wallets and banking applications, posing a serious threat to the security of users' digital assets.

The National Computer Virus Emergency Response Center released a technical traceability analysis report on the LuBian mining pool being hacked and a large amount of Bitcoin being stolen, which pointed out that: a major hacking incident occurred at the LuBian mining pool, with a total of 127,272.06953176 Bitcoins (valued at approximately $3.5 billion at the time, now worth $15 billion) stolen by the attackers. The holder of this large amount of Bitcoin is Chen Zhi, chairman of the Cambodian Prince Group.After the hacking incident, the Bitcoins stored in the wallet address controlled by the attackers remained dormant for 4 years, almost untouched, which clearly does not align with the typical behavior of hackers eager to cash out for profit, but rather resembles a precise operation orchestrated by a "national-level hacker organization." It was not until June 2024 that the stolen Bitcoins were transferred to a new Bitcoin wallet address, and they have remained untouched since. On October 14, 2025, the U.S. Department of Justice announced criminal charges against Chen Zhi and stated that 127,000 Bitcoins belonging to Chen Zhi and his Prince Group would be confiscated.Various pieces of evidence indicate that the large amount of Bitcoin confiscated from Chen Zhi and his Prince Group by the U.S. government was indeed the Bitcoin from the LuBian mining pool that had been stolen by hackers using technical means as early as 2020.In other words, the U.S. government may have already seized the 127,000 Bitcoins held by Chen Zhi through hacking techniques as early as 2020, making this a typical "black eat black" incident orchestrated by a national-level hacker organization. The impact of the LuBian mining pool hacking incident in 2020 was profound, leading to the actual dissolution of the mining pool, with losses amounting to over 90% of its total assets at the time, while the current value of the stolen Bitcoins has risen to $15 billion, highlighting the amplified risks of price volatility.

ChainCatcher news, according to official information, the token VIRUS from the Solana ecosystem game studio Pandemic Labs has received Moonshot certification. Today, the SocialFi project Addicted developed by Pandemic Labs has launched. As of the time of writing, the VIRUS token has increased by 170% in a single day, with a current market capitalization of $17.66 million and a 24-hour trading volume of $3.3 million.ChainCatcher reminds users that the prices of related tokens are highly volatile and trading volumes are relatively low, so users should invest cautiously.

ChainCatcher news, according to market reports, security company Mosyle has disclosed a cross-platform malware called ModStealer, which can disguise itself as a background helper program to bypass mainstream antivirus detection, specifically targeting the browser cryptocurrency wallet data on Windows, Linux, and macOS systems.The software spreads by masquerading as job advertisements, targeting developers who have a Node.js environment installed. ModStealer can run automatically and collect wallet extensions, system credentials, and digital certificates, subsequently uploading the data to a remote C2 server. Security experts warn that this malware poses a direct threat to cryptocurrency users and platforms, potentially leading to the leakage of private keys, recovery phrases, and API keys, triggering large-scale on-chain attacks.

ChainCatcher news, according to Cointelegraph, the crypto security platform Kerberus announced the acquisition of the fraud protection browser extension Pocket Universe's developer Refract for a seven-figure amount.After the acquisition, Kerberus plans to integrate Pocket Universe with its security extension Sentinel3 and expand its protection to all Ethereum Virtual Machine (EVM) chains and the Solana network.Company CEO Alex Katz stated that they are working on developing the industry's first dedicated antivirus software for cryptocurrencies to address the current biggest security threat—malware attacks.Pocket Universe founders Justin Phu and Nishan Samarasinghe will exit operations but continue to support the Kerberus team. Meanwhile, Crypto Banter founder Ran Neuner will join as a strategic advisor.

ChainCatcher news, according to Cointelegraph, security company Check Point warned that a malware named "JSCEAL," active since March 2024, has been inducing users to download a trojan through ads by impersonating nearly 50 popular crypto applications such as Binance, MetaMask, and Kraken, potentially affecting over ten million people worldwide. This trojan is written in JavaScript and has anti-detection mechanisms, capable of stealing wallet information, account passwords, Telegram data, and browser cookies, primarily disseminated through ads on platforms like Facebook.

ChainCatcher news, today Kaspersky disclosed a new virus called SparkKitty, which specifically targets screenshots of cryptocurrency users' mnemonic phrases. It pointed out that the two applications identified by Kaspersky for spreading this malware are both related to cryptocurrency. One of them, named "Coin", disguised itself as a cryptocurrency information tracker and was once available on the App Store.Coin responded: acknowledging that it had integrated a third-party SDK provided by a trading platform, but the high-risk features related to photo album permissions and image uploads in that SDK were disabled from the beginning and were never activated or triggered, thus user data was not affected. The Coin technical team discovered suspicious behavior in the SDK that induced the activation of photo album permissions and photo uploads during testing, and subsequently blocked the upload function through the interface to ensure that potential risk features could not operate. Currently, Coin has initiated a comprehensive code security review and has committed to upgrading the review process for third-party SDKs and background checks for partners to prevent similar incidents from occurring again.

ChainCatcher news, according to Cointelegraph, Kaspersky has discovered a new virus named SparkKitty, specifically targeting iOS and Android cryptocurrency applications, stealing mnemonic phrase screenshots from users' photo albums. Affected applications include "Coin" on the App Store and the SOEX messaging app, which has over ten thousand downloads on Google Play.This virus originates from the same source as the previously discovered SparkCat, with active time tracing back to early 2024, primarily attacking users in Southeast Asia and China.

ChainCatcher message, Slow Mist founder Yu Xian tweeted, "If antivirus software falsely reports your browser extension, such as a wallet extension's js file being falsely flagged, the antivirus software usually isolates it, which means the wallet extension will be damaged and unable to open. At this point, you can recover the file from isolation, do not delete it. If you delete it, do not uninstall the wallet extension either, as there may still be a chance to recover files related to the locally encrypted private key."

ChainCatcher news, the Trump family's new crypto project World Liberty Financial (abbreviated as WLFI) announced on the X platform that Alexei Dulub, the founder of Web3 Antivirus and PixelPlex, has joined the team as an advisor.According to WLFI's description: "Alexei has been a blockchain pioneer since 2013, building custom L1 and L2 that support today's Web3 projects."It is reported that Web3 Antivirus is an open-source Web3 extension project that prevents crypto scams and wallet losses, while PixelPlex is a provider of blockchain technology solutions and software development.

ChainCatcher message, Slow Mist founder Yu Xian posted on the X platform stating that the Monoswap hacking incident involves the use of a forged Kakao video conferencing Trojan software kakaocall[.]kr. If you have downloaded this software, it is recommended to immediately secure your assets and perform a virus scan and reset.

The first season airdrop of the token DEFI for Web3 SocialFi and antivirus software De.Fi has launched, with a total of 3.8 million DEFI. The snapshot was completed on February 7 at 21:00. Users can check their eligibility on the corresponding page. The claim period will last from February 15 to March 7, and a Diamond Hands program will be introduced for DEFI stakers and top public sale referrers and contributors.

According to CoinDesk, blockchain security company De.Fi has announced the launch of an antivirus tool on the zkSync Era mainnet. This antivirus tool can protect users from common malicious crypto attacks, such as phishing, smart contract vulnerabilities, and blind signatures. Users can access these security tools simply by connecting their wallets or scanning the smart contract address on the De.Fi platform.De.Fi stated that zkSync Era users can instantly revoke any potential risks associated with tokens, NFTs, or transaction vaults built on zkSync. The service claims to continuously scan and monitor over 30,000 smart contracts deployed on the zkSync Era blockchain to detect new threats and vulnerabilities in real-time.

ChainCatcher news, according to inews24, South Korean antivirus company AhnLab's blockchain subsidiary AhnLab Blockchain Company has released the mobile version of the Web3 wallet ABC Wallet on Google Play and the Apple App Store. ABC Wallet enhances its security and convenience by introducing Secure MPC technology.Earlier reports indicated that South Korean telecom giant SK Telecom signed an agreement with AhnLab Blockchain Company in July 2022 to jointly develop and operate the Web3 wallet. (source link)