Северокорейские хакеры обкрадывают криптофирмы через браузер Chromium

cryptonews.ruPublicado em 2021-11-30Última atualização em 2024-08-31

Согласно отчёту компании Microsoft, группа северокорейских хакеров Citrine Sleet обманом вынуждала криптофирмы загружать вредоносное программное обеспечение AppleJeus для кражи их активов. Один из взломов специалисты Microsoft обнаружили 19 августа.

Преступники воспользовались серьёзной уязвимостью под номером CVE-2024-7971 в браузере Chromium, которая позволила им обходить защиту и получать доступ к данным пользователей. Позже стало известно, что компания Google устранила проблему через два дня после обнаруженной атаки с помощью исправления, выпущенного 21 августа.

Помимо вредоносного софта AppleJeus, которое использовалось для кражи средств, северокорейские хакеры устанавливали программное обеспечение FudModule. Оно было специально разработано для того, чтобы обходить меры безопасности Windows. В Microsoft сообщили, что в 2021 году FudModule активно применяли другие северокорейские хакеры из группы Diamond Sleet.

Хакеры из Северной Кореи хорошо известны специалистам по кибербезопасности. Один из них недавно раскрыл сложную схему, в которой участвовал 21 мошенник. Они выдавали себя за разработчиков криптовалют. В результате жертвы лишились более $1,3 млн, которые в дальнейшем были отмыты через множество транзакций и криптомиксер Tornado Cash.

Leituras Relacionadas

OpenAI's "Most Open" Move: Codex No Longer Exclusively Favors GPT

OpenAI has significantly opened up its Codex programming agent by introducing a "model provider" configuration layer that allows users to connect it with various open-source models, not just its proprietary GPT. Through a configuration file or a simple `--oss` command-line flag, Codex can now route requests to local services like Ollama or LM Studio, or to third-party APIs such as Mistral or DeepSeek. This move is seen as one of OpenAI's most "open" steps, potentially lowering costs and enhancing privacy for developers who can run code generation offline. However, integration isn't seamless for all models. Codex primarily uses OpenAI's newer Responses API, while many open-source models rely on the older Chat Completions interface. This creates compatibility issues, especially for advanced features like function calling. The developer community is already building "routing" or adapter layers (e.g., CC Switch, LiteLLM) to translate between these protocols, enabling hybrid setups where GPT handles planning and open-source models handle execution. Analysts interpret this as a strategic shift for OpenAI: from competing solely on model superiority to controlling the platform and interface standards. By making Codex a flexible, pluggable entry point for AI-assisted programming, OpenAI aims to become the central hub in the developer toolchain ecosystem, even as users gain the freedom to switch underlying models.

marsbitHá 37m

OpenAI's "Most Open" Move: Codex No Longer Exclusively Favors GPT

marsbitHá 37m

When 500 Million People Abandon ChatGPT

ChatGPT's Global AI Assistant Market Share Drops Below 50% Three and a half years after its groundbreaking launch, ChatGPT faces a pivotal moment. While it remains the largest AI assistant globally, its market share has fallen below 50% for the first time, reaching 46.4% as of May, according to Sensor Tower's 2026 AI landscape report. Google's Gemini (27.7%) and Anthropic's Claude (10.3%) are now its main competitors, with Grok, Perplexity, and others also gaining ground. The market has evolved from awe and initial adoption into a phase of product comparison, ecosystem integration, and commercialization. User behavior has matured significantly. Loyalty is low; users readily switch between assistants for specific tasks. Gemini benefits from deep integration within Google's ecosystem (Search, Gmail, Android), while Claude has carved a niche among productivity-focused users with strong retention, nearly matching ChatGPT's. User choice is now influenced by a complex mix of capability, ecosystem, price, use case, and even brand trust. Commercialization is accelerating. AI app downloads continue but growth is slowing, while user spending is rising. Over $4.2 billion was spent in-app during H1 2026. Claude leads in premium subscription conversion rates (13%). OpenAI is expanding its revenue streams, testing ads shown to 17% of ChatGPT users daily by May. This shift highlights the immense financial pressure of model training and inference costs. Despite revenue growth, OpenAI's cash burn is intense, reaching $3.7 billion in Q1 2026. The company projects this could rise to $25-57 billion in the coming years, underscoring the industry-wide challenge of scaling profitably. The symbolism is clear: ChatGPT no longer defines the AI assistant market alone. The era of a single dominant product is over. Gemini, Claude, and specialized tools are collectively shaping user habits and business models. As AI assistants move from novelty to utility—judged on accuracy, efficiency, and value—they are becoming embedded in everyday digital life. ChatGPT may have lost its majority, but AI as a whole is winning, entering a mature, competitive, and diverse new phase.

marsbitHá 39m

marsbitHá 39m

Andre Cronje Departs Sonic Labs Board Amid Token Slump

Key DeFi developer Andre Cronje and two other directors have resigned from the board of Sonic Labs, formerly the Fantom Foundation. The departures raise governance questions for the high-speed EVM scaling project, coinciding with a significant decline in its native token, S/FTM, which trades approximately 97% below its all-time high. Despite the board shake-up, developers state that technical execution and protocol launch timelines remain unaffected. The project's new CEO is focused on operational restructuring. The situation underscores the volatility and governance challenges within the DeFi space, with future stability dependent on transparent leadership and adherence to the technical roadmap.

bitcoinistHá 11h

Andre Cronje Departs Sonic Labs Board Amid Token Slump

bitcoinistHá 11h

Kraken Brings Solana DEX Trading Directly to Its Main App

Kraken has integrated on-chain Solana decentralized exchange (DEX) trading directly into its main application. This allows eligible customers in the US and over 100 countries to trade more than 2,500 Solana-based tokens without leaving the Kraken app, eliminating the need for separate wallets or applications. The move aims to combine the convenience and security of a centralized platform with the deep liquidity and broad token access of decentralized finance on Solana. A key benefit is direct exposure to early-stage assets not typically available on traditional exchange order books. The integration was announced on June 20, 2026.

bitcoinistHá 12h

Kraken Brings Solana DEX Trading Directly to Its Main App

bitcoinistHá 12h

Ethereum Bears Keep Control As ETH Rejects Trendline Resistance

Ethereum's (ETH) recent price rebound is still viewed as unconvincing by some analysts, with technical analysis indicating continued bearish control. ETH has failed to break above a key falling trendline and a horizontal resistance zone, forming a pattern of lower highs and lower lows. This rejection at a confluence of resistances strengthens the bearish case. The critical support zone to watch is between $1,350 and $1,500. A breakdown below this area would signal significant weakness. Currently, ETH is trapped between this support and the dominant falling resistance, keeping the market in a compressed technical state. Ethereum's struggle is also significant for the broader altcoin market, as it often sets the tone for risk appetite. The analysis concludes that bulls require a decisive break above the identified resistance before any talk of a sustained reversal is warranted.

bitcoinistHá 13h