Команда по кибербезопасности разрабатывает «проверяемые отчеты о фишинге» для борьбы с мошенниками

cryptonews.ruPublished on 2025-02-13Last updated on 2025-10-14

Некоммерческая организация, которая занимается кибербезопасностью, выпустила новый инструмент, который поможет исследователям безопасности проверять фишинговые атаки с использованием криптовалют, в результате которых в первой половине 2025 года было украдено более 400 000 000 долларов.

В понедельник Security Alliance (SEAL) объявил о разработке нового инструмента, который «позволит продвинутым пользователям и исследователям безопасности» присоединиться к борьбе с фишингом с использованием криптовалют, проверяя вредоносность фишингового сайта.

«Исследователи кибербезопасности часто не могут увидеть или воспроизвести то, что видят пользователи, сталкиваясь с потенциально вредоносной ссылкой, поскольку мошенники разработали «маскирующие функции» для предоставления безопасного контента предполагаемым веб-сканерам», - добавили они.

Новый инструмент SEAL, называемый системой «TLS Attestations and Verifiable Phishing Reports», предназначенный для исследователей безопасности, теперь поможет доказать, что вредоносный веб-сайт действительно содержит фишинговый контент, который, по словам пользователя, он видит.

«Это инструмент, который поможет эффективнее работать вместе опытным «хорошим парням», а не просто рядовым пользователям, - рассказали в интервью бойцы SEAL. - Нам нужен был способ увидеть то, что видит пользователь. В конце концов, если кто-то утверждает, что URL-адрес содержит вредоносный контент, мы не можем просто поверить ему на слово».

Как работают проверяемые отчеты SEAL о фишинге

Система работает по принципу использования доверенного сервера аттестации в качестве криптографического оракула во время TLS-подключения.

Transport Layer Security (TLS) - это веб-протокол, который обеспечивает безопасную связь в компьютерной сети путем шифрования данных для защиты от перехвата и подделки.

Пользователь или исследователь запускает локальный HTTP-прокси, который перехватывает соединения, собирает информацию о них и отправляет ее на сервер аттестации. Сервер выполняет все операции шифрования или дешифрования, в то время как пользователь поддерживает фактическое сетевое соединение.

Аттестация в действии: выявление вредоносных ссылок. Источник: SEAL.

Подтверждаемые отчеты о фишинге

Пользователи могут отправлять «подтверждаемые отчеты о фишинге» - криптографически подписанные доказательства, которые точно указывают, какой контент им предоставил веб-сайт.

SEAL может проверить их подлинность, не открывая сами фишинговые сайты, что значительно усложняет злоумышленникам задачу сокрытия вредоносного контента.

«Этот инструмент предназначен ТОЛЬКО для опытных пользователей и специалистов по безопасности», - написал SEAL на странице загрузки на GitHub.

$ANSEM deployer sends 60% of supply to Ansem, who says he has airdropped $7M to holders

The Solana memecoin $ANSEM is facing scrutiny after on-chain analysts revealed the token's deployer transferred approximately 60% of its total supply—650 million tokens—to crypto influencer Ansem. The deployer then sold their remaining tokens for about $11,800, securing an estimated profit of $5,500, despite the token briefly reaching a valuation above $120 million. In response, Ansem stated he has already distributed roughly $7 million worth of $ANSEM through community airdrops and plans further distributions as the token's market cap grows, aiming to expand the holder base. However, analytics platform Bubblemaps identified an early holder cluster that has sold about $500,000 of tokens and still holds around 1% of the supply, indicating continued selling pressure amidst the token's volatile rally and $43 million market capitalization.

ambcrypto30m ago

$ANSEM deployer sends 60% of supply to Ansem, who says he has airdropped $7M to holders

ambcrypto30m ago

BTC Market Pulse: Week 27

Bitcoin's price remained weak, testing support around $58K before stabilizing near $60K. The market is in a structural adjustment with persistent net selling in spot markets and capital outflows from US ETFs, indicating a lack of buyer conviction. Derivatives markets show ongoing deleveraging and high demand for downside protection, reflecting a cautious and defensive posture among traders. On-chain metrics present a mixed picture: transfer volume has recovered, suggesting large capital movement, but rising "hot" (short-term) capital and subdued network fees point to underlying caution and potential volatility. Overall, while finding tentative stability, Bitcoin lacks the key drivers for a sustained recovery, requiring a significant return of buyer confidence.

insights.glassnode53m ago

insights.glassnode53m ago

Strategy approves Bitcoin monetization program under new capital framework

Strategy has approved a board-authorized Bitcoin monetization program under a new Digital Credit Capital Framework, formally outlining for the first time how it may sell portions of its Bitcoin holdings. The framework allows the company to monetize Bitcoin to build up to $1.25 billion in U.S. dollar reserves, fund dividend and interest payments, and repurchase preferred securities and common stock. Executive Chairman Michael Saylor described it as an evolution in capital strategy, enabling Bitcoin to support shareholder value while remaining the primary treasury asset. The announcement accompanied disclosures of a $2.55 billion cash reserve, authorization for $2 billion in buybacks, and an unchanged Bitcoin holding of 847,363 BTC.

ambcrypto2h ago

Strategy approves Bitcoin monetization program under new capital framework

ambcrypto2h ago

In Such a Crowded Cross-border Payment Track, Where Does the Next Stop Lie in the Future?

The crowded cross-border payments industry faces a paradox: intense competition above water with financing and narratives, while beneath, price wars and shrinking margins in basic PSP services are common. The path forward lies not in simple "cross-border" solutions but in deep **localization**. Success requires mastering the fragmented and tightening regulations of fiat currencies in each market—the "last mile" of compliance, banking, and settlement. Many Chinese PSPs have succeeded by following Chinese merchants overseas but have not deeply penetrated mainstream local merchant ecosystems abroad. Their strong product capabilities need to be applied to new, complex markets. The future belongs to companies that evolve from single-channel providers to **cross-border capital network operators**. This means moving beyond competing on transaction fees to creating internal networks that optimize capital efficiency through multi-directional matching, netting, and position reuse across countries and currencies. For Web3 and stablecoins, the key is integration, not replacement. Stablecoins offer efficiency gains but cannot bypass the foundational trust, compliance, and legal frameworks of traditional finance. The realistic path is the gradual adoption and "taming" of Web3 technologies by established financial institutions. The ultimate solution is a **dual clearing infrastructure** combining deep local fiat capabilities (local accounts, compliance, banking) with lightweight stablecoin-native capabilities (on-chain settlement, wallets). The biggest opportunity lies not in oversaturated mainstream corridors but in complex, underserved regional corridors (e.g., specific CIS, Middle East-Southeast Asia, or Latin American trade pairs). The winners will be those who build hard-to-replicate, deep capabilities in these areas—acting as the essential "clearing shovels" or infrastructure providers. The future keywords are **more local, more networked, and more stablecoin-native**. High-profit opportunities remain in the non-standardized, difficult-to-replicate deep waters of the industry, requiring genuine on-the-ground presence and long-term patience.

链捕手2h ago

In Such a Crowded Cross-border Payment Track, Where Does the Next Stop Lie in the Future?

链捕手2h ago

Lightning Fast Five-Whip Combo! Strategy's Self-Rescue Plan Officially Released

Strategy, amidst the STRC de-pegging crisis, has unveiled its "Digital Credit Capital Framework" self-rescue plan. The five-part framework includes: 1) **Cash Reserves**: Management of ~$2.55B in USD reserves, dedicated solely to covering ~17.4 months of preferred stock dividends and debt interest, with a 12-month minimum coverage floor. 2) **Dividend Policy**: STRC's dividend yield rises to 12% from July 1st, with monthly reviews. Strategy clarifies de-pegging does not automatically trigger further hikes. 3) **Preferred Stock Buyback**: A $1B authorization, prioritizing STRC repurchases to support its price, reduce future dividend obligations, and signal commitment, using funds separate from dividend reserves. 4) **Common Stock Buyback**: A separate $1B authorization for MSTR stock, aimed at creating shareholder value when the stock is deemed undervalued, establishing a two-way capital management mechanism. 5) **Bitcoin Monetization**: Formal authorization to sell BTC (up to $1.25B earmarked) to build USD reserves, cover dividends/interest, or fund buybacks, marking a strategic shift where BTC becomes a managed asset rather than a strictly "hold-only" reserve. Market reaction saw MSTR and STRC shares rise pre-market, while BTC remained stable. The plan aims to restore confidence in STRC, ensure dividend sustainability, and reopen Strategy's funding channels.

Odaily星球日报3h ago

Lightning Fast Five-Whip Combo! Strategy's Self-Rescue Plan Officially Released

Odaily星球日报3h ago

Trading

Spot