Специалисты Microsoft обнаружили уязвимость в браузере Chromium для кражи криптовалют

investing.ruPubblicato 2024-09-02Pubblicato ultima volta 2024-09-02

GetBlock Magazine - Что произошло? Специалисты корпорации Microsoft (NASDAQ:MSFT) обнаружили группу хакеров из КНДР, использующую уязвимость нулевого дня в веб-браузере с открытым исходным кодом Chromium для получения удаленного доступа к выполнению кода (RCE). По словам экспертов, уязвимость, получившая идентификатор CVE-2024-7971, нацелена на криптовалютный сектор.

Пресс-релиз

Что еще известно? CVE-2024-7971 затрагивает версии Chromium до 128.0.6613.84 и являет собой уязвимость путаницы типов (Type Confusion Vulnerability) в JavaScript и WebAssembly V8. Она была обнаружена 19 августа, а 21 августа команда Google (NASDAQ:GOOGL) выпустила исправление для ее устранения. Для защиты активов пользователям Chromium следует убедится, что они используют новейшую версию.

Ранее в этом году уже было устранено и обнаружено две схожие уязвимости под идентификаторами CVE-2024-4947 и CVE-2024-5274.

Группа, которую Microsoft идентифицировала как Citrine Sleet, базируется в Северной Корее, связана с правительством страны и нацелена на организации и частных лиц, управляющих криптовалютами. Методом социальной инженерии Citrine Sleet провела обширную разведку криптоиндустрии и связанных с ней лиц.

Злоумышленники создают поддельные веб-сайты под видом легальных торговых криптоплатформ и используют их для распространения поддельных офферов или приглашений к загрузке вредоносного ПО. Citrine Sleet чаще всего использует собственный троян AppleJeus, который собирает информацию, необходимую для захвата контроля над криптоактивами жертв.

Ранее поставщик решений для кибербезопасности Check Point (NASDAQ:CHKP) обнаружил свободно распространяемое вредоносное ПО Styx Stealer для кражи данных и криптовалют с помощью механизма клиппинга.

Читайте оригинальную статью на сайте GetBlock Magazine

Letture associate

Rebound or liquidation? SOL at a make or break point!

Solana (SOL) traders are facing a critical juncture as market sentiment hits yearly lows. Trading volume has plummeted to approximately $2.27 billion, its lowest in 2026, while negative sentiment has surged significantly. This frustration stems from SOL's price performance lagging behind its growing ecosystem activity. Despite the prevailing negativity, which can sometimes precede a bullish reversal, the derivatives market shows a heavy skew towards long positions, with $7.4 billion in long exposure versus $3.1 billion in shorts. A major cluster of long liquidations sits around $61-$62, posing a risk if the price declines. Although technical indicators like the RSI are neutral and the MACD is positive, the upward momentum is cooling. SOL's price, near $77.95, is testing resistance. The crowded long positions remain a potential source of selling pressure, meaning SOL needs to break above recent highs to rebuild trader confidence and avoid a deeper downturn.

ambcrypto9 min fa

Rebound or liquidation? SOL at a make or break point!

ambcrypto9 min fa

BWiGA will be held in Montenegro again in September

The Balkan Web3 and iGaming Awards (BWiGA) will be held for the third time in Budva, Montenegro, on September 30th. The premium event, held in collaboration with the Infofest IT conference, will feature discussion panels, solo presentations, a startup pitch session, an awards ceremony, and a seaside evening party. It will attract participants from numerous countries including the UK, Germany, Turkey, and several Balkan nations. The event will include notable speakers such as Vit Jedlička (President of Liberland) and a jury featuring experts like Guy Yanpolsky. According to founder Alexey Nasybullin, the event has garnered significant international interest and a growing regular audience. BWiGA is organized by Lead Volume and serves as a key regional hub for networking and industry recognition in the Web3 and iGaming sectors.

TheNewsCrypto18 min fa

BWiGA will be held in Montenegro again in September

TheNewsCrypto18 min fa

IP Token Plunges 98%, Is DATA Rebranding the Last-Ditch Effort? Analyzing Story Protocol's Transformation

IP Token Plummets 98%, Is DATA Rebranding a Last Gamble? Analyzing Story Protocol's Pivot **Summary** Story Protocol, having seen its IP token fall approximately 98% from its all-time high, announced a major pivot on June 25, rebranding as the DATA Foundation. The project will shift its focus from IP to AI training data infrastructure, with a corresponding token change from IP to DATA. While the announcement triggered a brief price bounce, the token soon fell back near its lows. This analysis argues that such a fundamental rebrand is not typically a bullish signal, but rather an admission that the original strategy failed. Historically, rebrands fail when not backed by genuine improvements in product, user adoption, or liquidity, as seen in cases like MultiversX (Elrond) and Golem. Merely chasing a new narrative without execution is insufficient. Conversely, successful pivots are defined by on-chain evidence of growth. The transformation of ETHLend into Aave is the prime example, where a surge in Total Value Locked (TVL) and users preceded and drove long-term value. Projects like Polygon and Kaia, despite price declines, show underlying operational strength. Story’s pivot, announced just two weeks after its token hit a record low, risks being perceived as a last-ditch marketing effort. Leadership changes—with founder Seung Yoon Lee moving to an advisory role—further close the chapter on the original vision. For the DATA rebrand to succeed, it must demonstrably improve the token's relative strength against the market, boost on-chain liquidity/volume, and generate real user growth and settlement revenue from its new AI data narrative. Without such tangible results, Story will likely join the list of failed rebrands.

Foresight News24 min fa

IP Token Plunges 98%, Is DATA Rebranding the Last-Ditch Effort? Analyzing Story Protocol's Transformation

Foresight News24 min fa

Bitwise Reports Third Consecutive Crypto Market Decline as Tokenized Assets Reach Record Highs

Bitwise's Q2 2026 report details a third consecutive quarterly decline for the broader crypto market, with its Large Cap Crypto Index falling 15.4%. This downturn was marked by significant outflows from Spot Bitcoin ETFs, decreased trading activity, and heightened correlation with traditional stock markets. However, the report highlights a stark divergence from this negative price action, showcasing record growth in several blockchain sectors. Prediction markets saw trading volume surge to a historic $43.2 billion, while the total value of tokenized real-world assets grew over 50% year-to-date to nearly $32.89 billion. Key infrastructure also expanded, with stablecoin adoption and settlement volume outpacing major networks like Visa. Despite crypto asset prices underperforming, metrics such as Ethereum transaction activity and DeFi TVL have risen substantially from their 2022 lows, indicating robust and advancing underlying blockchain technology adoption.

TheNewsCrypto59 min fa

Bitwise Reports Third Consecutive Crypto Market Decline as Tokenized Assets Reach Record Highs

TheNewsCrypto59 min fa

USDT on TRON Exceeds $90 Billion as TRON Leads USDT Transfer Volume With $4.2 Trillion YTD

The total circulating supply of USDT on the TRON blockchain has surpassed $90 billion, solidifying its position as a leading network for the stablecoin. According to data, TRON leads all networks in USDT transfer volume year-to-date, processing approximately $4.2 trillion. The network handles over 12.7 million daily transactions, supports over 392 million user accounts, and facilitates an average of $23.8 billion in daily USDT transfers. TRON attributes this growth to its scale, low costs, and focus on practical utility for digital dollar transfers and real-world use cases. Recent institutional developments include integrations by Anchorage Digital and Securitize, with the latter supporting the first tokenized asset from Hamilton Lane on the TRON network. The ecosystem also emphasizes security through the T3 Financial Crime Unit, a collaboration that has frozen over $450 million in criminal assets globally. TRON DAO states the network remains a core infrastructure pillar for the expanding digital dollar economy, driving efficiency, accessibility, and financial inclusion.

TheNewsCrypto1 h fa

USDT on TRON Exceeds $90 Billion as TRON Leads USDT Transfer Volume With $4.2 Trillion YTD

TheNewsCrypto1 h fa

Trading

Spot