BTC $84,534.09 -0.23%
ETH $2,661.84 -1.42%
BNB $765.65 -0.68%
XRP $1.47 -1.36%
SOL $118.14 +0.07%
TRX $0.3342 -0.26%
DOGE $0.0920 -2.29%
ADA $0.2407 -2.28%
BCH $307.87 -0.35%
LINK $13.68 -4.26%
HYPE $86.91 -0.18%
AAVE $181.04 +5.87%
SUI $1.12 -4.19%
XLM $0.2133 -2.66%
ZEC $1,283.99 -3.79%
AAPL $333.34 +0.90%
AMZN $251.11 +0.97%
GOOGL $343.23 +1.13%
MSFT $517.54 +0.67%
META $727.26 +0.17%
NVDA $233.95 +1.14%
TSLA $371.03 +4.46%
SNDK $1,718.41 -3.35%
INTC $119.29 -0.61%
SPCX $158.74 +6.67%
MU $1,071.67 -1.60%
AMD $632.99 +2.71%
BTC $84,534.09 -0.23%
ETH $2,661.84 -1.42%
BNB $765.65 -0.68%
XRP $1.47 -1.36%
SOL $118.14 +0.07%
TRX $0.3342 -0.26%
DOGE $0.0920 -2.29%
ADA $0.2407 -2.28%
BCH $307.87 -0.35%
LINK $13.68 -4.26%
HYPE $86.91 -0.18%
AAVE $181.04 +5.87%
SUI $1.12 -4.19%
XLM $0.2133 -2.66%
ZEC $1,283.99 -3.79%
AAPL $333.34 +0.90%
AMZN $251.11 +0.97%
GOOGL $343.23 +1.13%
MSFT $517.54 +0.67%
META $727.26 +0.17%
NVDA $233.95 +1.14%
TSLA $371.03 +4.46%
SNDK $1,718.41 -3.35%
INTC $119.29 -0.61%
SPCX $158.74 +6.67%
MU $1,071.67 -1.60%
AMD $632.99 +2.71%

quick

全部
文章
快訊

黑客冒充 VC 並劫持 QuickLens 插件,利用 ClickFix 技術竊取加密資產

ChainCatcher 消息,据 Cointelegraph 報導,黑客正利用 "ClickFix" 攻擊手法竊取加密貨幣,最新兩起攻擊涉及冒充風險投資公司和劫持瀏覽器擴展程序。網絡安全公司 Moonlock Lab 報告稱,詐騙者冒充 SolidBit、MegaBit 和 Lumax Capital 等虛假 VC,通過 LinkedIn 聯繫用戶提供合作機會,然後引導其點擊虛假的 Zoom 和 Google Meet 鏈接。點擊鏈接後,用戶會被引導至帶有偽造 Cloudflare "我不是機器人"驗證框的頁面,點擊該框會將惡意命令複製到剪貼板,並提示用戶打開終端粘貼所謂的驗證碼,從而執行攻擊。Moonlock Lab 指出,這種手法讓受害者成為執行機制,繞過了安全行業的防禦措施。與此同時,黑客還通過劫持 Chrome 擴展程序 QuickLens 傳播惡意軟件。該擴展允許用戶在瀏覽器中直接運行 Google Lens 搜索,在被轉讓所有權後,新版本包含惡意腳本,可發起 ClickFix 攻擊並竊取信息。該擴展約有 7000 名用戶,被劫持後會搜索加密錢包數據和助記詞以竊取資金,還會抓取 Gmail 收件箱內容、YouTube 頻道數據以及輸入網頁表單的登錄憑證或支付信息。該擴展已被從 Chrome 網上應用店移除。ClickFix 技術自去年在黑客中流行,迫使受害者手動執行惡意負載,已影響全球數千企業及多個行業。
app_icon
ChainCatcher 與創新者共建Web3世界