Sophos X-Ops: Вредоносное ПО Atomic macOS Stealer атакует криптокошельки пользователей Apple

cryptonews.ruPubblicato 2023-03-07Pubblicato ultima volta 2024-09-07

По данным компании по кибербезопасности Sophos X-Ops, вредоносные программы, такие как AMOS, MetaStealer, KeySteal или CherryPie, стали регулярно поражать компьютеры и смартфоны, работающие под операционной системой macOS.

Наибольшую угрозу, по мнению экспертов, представляет Atomic macOS Stealer (AMOS) о котором впервые стало известно в 2023 году. AMOS является одним из самых распространенных хакерских решений, нацеленных на кражу конфиденциальных данных с устройств, использующих программную среду macOS. В зону «интересов» AMOS входят данные криптовалютных кошельков и автозаполнения, а также файлы cookie и пароли, включая связку ключей Apple и пароль macOS. По мнению экспертов Sophos, большая часть похищенной информации продается на криминальных рынках.

В качестве одно из вектора атаки AMOS специалисты назвали тактику «SEO-заражения», когда ничего не подозревающие держатели цифровых активов ищут название определенного ПО или утилиты, а сайт злоумышленника появляется в верхних результатах поиска. Предложенная загрузка имитирует настоящее приложение и тайно устанавливает вредоносное ПО на компьютер пользователя. Также злоумышленники используют легитимную инфраструктуру социальных сетей и GitHub для размещения бинарных файлов AMOS.

Atomic macOS Stealer пользуется повышенным спросом в киберпреступном мире: цена месячной лицензии AMOS за последний год выросла втрое — с $1 000 до $3 000. В Sophos предупреждают, что вступление в силу закона ЕС о цифровых рынках (DMA), которое обязывает Apple открыть платформу для альтернативных торговых площадок, может стать дополнительным стимулом для разработчиков вредоносного ПО.

Напомним, что в апреле генеральный директор поставщика криптокошельков Trust Wallet Эовин Чен (Eowyn Chen) рекомендовал пользователям смартфонов Apple отключить сервис iMessage из-за опасений эксплойта нулевого дня.

Letture associate

Mantle loses key long-term support as selling volume surges 44%

The cryptocurrency market experienced a significant downturn, with Bitcoin dropping 8.6% and Mantle (MNT) falling sharply by 21.6%. MNT's daily trading volume surged 44%, indicating strong selling pressure. The decline was influenced by macroeconomic news, specifically a rise in the PCE price index, which triggered a broader market sell-off. Technically, Mantle lost a critical long-term support level at $0.55 on its weekly chart, confirming a bearish trend. Analysis suggests the price could drop further toward the $0.319 support level. On shorter timeframes, the bearish structure remains intact. However, with the RSI deeply oversold, a price bounce is anticipated. Traders are advised to wait for a potential rebound to the $0.526-$0.556 range to consider selling opportunities.

ambcrypto23 min fa

Mantle loses key long-term support as selling volume surges 44%

ambcrypto23 min fa

Why Is No One Buying DeFi Insurance?

"Why DeFi Insurance Remains Unpurchased" explores the paradox of decentralized finance insurance. While DeFi insurance promises automatic, unbiased payouts via smart contracts—eliminating traditional insurers' denial practices—it struggles to attract users. The core issue is economic viability. Premiums are prohibitively high relative to the yields from DeFi protocols. For example, insuring a deposit on Aave or Maple Finance can consume most or even all of the annual yield, leaving returns comparable to or worse than traditional savings. Only the safest protocols, like MakerDAO, offer affordable premiums. Furthermore, the DeFi insurance model is structurally fragile. Unlike traditional insurance where risks are uncorrelated, DeFi risks are highly interconnected (e.g., oracle failures, bridge hacks). A single major exploit can simultaneously threaten multiple protocols, potentially bankrupting the entire insurance pool, which holds only millions against billions in total value locked. The governance model also creates a conflict of interest. In platforms like Nexus Mutual, token holders who vote on claims risk their own capital if payouts are approved, incentivizing denials. Consequently, the market is tiny and shrinking. Nexus Mutual dominates with $81.56 million in assets, but the industry lacks the capacity to cover a catastrophic event like the $292M Kelp DAO hack. Other providers have dwindled or shut down. The article concludes that DeFi insurance faces a "tragedy of the commons": its stability requires widespread adoption, but individual users have no incentive to pay for it, as premiums destroy their yields. Current solutions involve preventative measures like bug bounties and seeking external capital from traditional reinsurance, acknowledging that on-chain capital alone is insufficient to cover on-chain risks.

marsbit53 min fa

marsbit53 min fa

Cardano Wallets Hit By SecondFi Exploit As Private Key Flaw Sparks Security Warning

SecondFi, previously linked to the Yoroi wallet, has halted services following a critical security flaw in its proprietary web-based wallet generation software. The vulnerability reportedly exposed private keys, leading to a significant theft of ADA tokens. Initial reports estimate losses of 16 million ADA (~$2.4M) from 374 wallets, while security firm SlowMist warns the broader impact could exceed 129 million ADA (over $20M). Crucially, the incident was confined to SecondFi's software; the Cardano blockchain protocol itself was not compromised. The core issue involves insecure private key generation, allowing attackers access to affected wallets. A primary warning for users is to avoid restoring compromised seed phrases into other wallets, as this would not resolve the underlying key exposure. Users are also cautioned against unverified recovery links or third-party refund platforms. The situation underscores that blockchain security extends beyond the protocol layer to include wallet software and key management. The community awaits a full post-mortem and confirmation of the final impact.

bitcoinist55 min fa

Cardano Wallets Hit By SecondFi Exploit As Private Key Flaw Sparks Security Warning

bitcoinist55 min fa

Strategy’s Bitcoin gamble turns sour: $14B loss raises fears of a deeper BTC fall

Bitcoin faces increasing bearish pressure, with potential for its first three consecutive negative quarters since 2022 following a 22% Q1 drop and a 12.2% Q2 decline. A negative Q3 would signal a shift toward a structural downtrend. Concerns center on Strategy's digital asset treasury (STRC), which has fallen nearly 25% this cycle. Strategy holds an estimated $14 billion in unrealized Bitcoin losses, raising doubts about its ability to sustain STRC's 11.5% dividend yield ($1.2B annually) and continue future Bitcoin purchases. This situation heightens the risk of deeper market capitulation, potentially pushing BTC lower.

ambcrypto1 h fa

Strategy’s Bitcoin gamble turns sour: $14B loss raises fears of a deeper BTC fall

ambcrypto1 h fa

Solana Spot ETF Filings In Focus While SOL Trades Near Key Support

Solana traders are monitoring both a key ETF filing and technical price levels. Morgan Stanley amended its S-1/A filing for a proposed spot Solana Trust (ticker MSOL), detailing a 0.14% annual fee and plans for native staking through providers like Figment. Crucially, the filing indicates 95% of staking rewards would be passed to shareholders, a significant structural point for a potential ETF. On the market side, SOL recently traded between $67.21 and $70.46, with immediate resistance near $74 and key support around $60. The article notes that while the filing provides a concrete document for analysis, SOL's short-term price is influenced by broader market factors. Next, watch for regulatory responses and whether SOL can break above $74 or if the $60 support level will hold.

bitcoinist2 h fa

Solana Spot ETF Filings In Focus While SOL Trades Near Key Support

bitcoinist2 h fa

Trading

Spot