Новая Android malware крадет закрытые ключи со скриншотов и фото

cryptonews.ruPublicado em 2024-01-07Última atualização em 2024-09-07

Новая вредоносная программа для Android под названием SpyAgent, обнаруженная фирмой по безопасности программного обеспечения McAfee, может красть закрытые ключи, хранящиеся на снимках экрана и изображениях во внутренней памяти смартфона.

Более конкретно, вредоносная программа использует механизм, известный как оптическое распознавание символов (OCR), для сканирования изображений, хранящихся на смартфоне, и извлечения из них слов. OCR присутствует во многих технологиях, включая настольные компьютеры, которые могут распознавать, копировать и вставлять текст из изображений.

McAfee Labs объяснила, что программа распространяется через вредоносные ссылки, отправляемые в текстовых сообщениях. Компания по кибербезопасности разобрала процесс, начав с того, что ничего не подозревающий пользователь нажимает на полученную ссылку.

Ссылка перенаправит пользователя на, казалось бы, легитимный веб-сайт и предложит ему загрузить приложение, представленное как заслуживающее доверия. Однако приложение является вредоносной программой SpyAgent, и ее установка поставит под угрозу телефон.

Согласно отчету, эти мошеннические программы маскируются под банковские приложения, правительственные приложения и потоковые сервисы. После установки приложений пользователям предлагается предоставить приложению разрешение на доступ к контактам, сообщениям и локальному хранилищу.

В 2024 году число атак вредоносного ПО растет

Подобное вредоносное ПО, поражающее системы MacOS, под названием «Cthulhu Stealer» было обнаружено в августе. Как и SpyAgent, Cthulhu Stealer маскируется под легальное программное приложение и крадет у пользователя личную информацию, включая пароли MetaMask, IP-адреса и закрытые ключи для холодных кошельков, находящихся на рабочем столе.

В том же месяце Microsoft обнаружила уязвимость в веб-браузере Google Chrome, которая, вероятно, была использована северокорейской хакерской группой под названием Citrine Sleet.

Сообщается, что хакерская группа создала поддельные криптовалютные биржи и использовала эти сайты для отправки мошеннических заявлений о приеме на работу ничего не подозревающим пользователям. Любой пользователь, который следовал этому процессу, непреднамеренно устанавливал на свою систему удаленно управляемое вредоносное ПО, которое крал у пользователя закрытые ключи.

Leituras Relacionadas

The Largest Upgrade Since The Merge? How Glamsterdam Will Affect Ethereum and Regular Users?

The upcoming Glamsterdam upgrade, scheduled for late 2026, is considered Ethereum's most significant change since The Merge. It focuses on fundamentally restructuring Ethereum's block production, transaction execution, and gas pricing to enable major scalability improvements while preserving decentralization. The upgrade centers on three key innovations: * **Enshrined PBS (ePBS)**: Moves the Proposer-Builder Separation mechanism into the protocol's core, eliminating reliance on external relays. This reorganizes the block pipeline, extending the time window for processing execution payloads, which is crucial for safely increasing block capacity. * **Block-Level Access Lists (BALs)**: Attaches a "map" to each block, declaring in advance which state data its transactions will access. This enables potential parallel transaction processing and faster node synchronization, breaking a key performance bottleneck. * **Gas Repricing**: Introduces a more accurate resource pricing model by separating computation costs from state storage costs. This discourages uncontrolled state growth by making operations that create permanent data (like new accounts) more accurately reflect their long-term network burden. Together, these changes aim to solve the core challenges of increasing Ethereum's throughput (e.g., raising the Gas Limit) without overburdening node hardware or increasing centralization risks. They prepare the infrastructure for higher capacity, targeting a credible post-upgrade capacity of up to 200 million Gas. For users, the impact will be nuanced: * General transaction fees may become lower and more stable as block space increases. * Simple transfers could see cost reductions, while state-intensive operations (like contract deployment) may become relatively more expensive due to the new gas model. * Gas fee estimations by wallets will become more accurate. * L2 networks could benefit long-term from increased data blob capacity. * Standardized logs for all ETH transfers (EIP-7708) will improve tracking for wallets and exchanges. Ultimately, Glamsterdam represents a foundational shift, not a simple block size increase. It seeks to expand Ethereum's capacity by re-engineering its underlying mechanics, maintaining its commitment to decentralization while enabling significant performance gains.

marsbitHá 11m

The Largest Upgrade Since The Merge? How Glamsterdam Will Affect Ethereum and Regular Users?

marsbitHá 11m

Circle CEO Responds to the OUSD Challenge: Stablecoin is a Winner-Takes-All Business, and We Won't Slow Down

In response to questions about the OUSD stablecoin initiative, Circle CEO Jeremy Allaire argues that the stablecoin market is a "winner-take-most" platform business driven by powerful network effects, and Circle has no plans to slow down. He outlines three key drivers behind USDC's dominant position: 1. **Protocol/Software Layer Network Effects**: The value of a stablecoin network grows as more developers and services integrate it, creating compounding utility and user preference. Circle has spent nearly a decade building this ecosystem with USDC, now accelerated by mainstream adoption and enhanced by software stacks like CCTP and Gateway for interoperability. 2. **Liquidity Network Effects**: Liquidity begets more liquidity. USDC has achieved top-tier global liquidity—ranking among the top three digital assets alongside BTC and USDT—through nearly a decade of building deep primary and secondary market access across regions and venues. 3. **Regulatory and Policy Integration**: Establishing a global stablecoin requires deep regulatory engagement, licensing, and compliance across key markets—a significant, long-term investment where Circle is a leader. Allaire cites Artemis data showing USDC facilitated 80% of all dollar stablecoin on-chain transaction volume in Q1 2026, with USDT at 20% and all others negligible. He addresses OUSD's purported advantages: "free" minting/burning is often not sustainable in practice; redistributing all revenue can starve essential infrastructure investment; and large consortium models historically struggle with inefficiency and slow execution, unlike focused strategic partnerships. He reaffirms Circle's strong ongoing partnership with Coinbase on USDC and notes Circle collaborates with dozens of other stablecoin issuers through its expanding platform (Arc, CCTP, CPN, etc.). While welcoming OUSD to the ecosystem, Allaire asserts that Circle's vast, trusted network and continued investment make USDC the foundational digital dollar infrastructure for the world.

链捕手Há 18m

Circle CEO Responds to the OUSD Challenge: Stablecoin is a Winner-Takes-All Business, and We Won't Slow Down

链捕手Há 18m

Payodex Crypto Exchange Review: Features, Security, Deposits and Withdrawals

This Payodex review outlines the key features of this centralized cryptocurrency exchange, founded in 2018 and operating under Cypriot regulation. The platform caters to both new and experienced traders with a user-friendly interface, low fees, and support for spot, futures, and margin trading (up to 1:20 leverage). Security measures include two-factor authentication, cold wallet storage, and encrypted data. Deposits and withdrawals are crypto-only, with a straightforward process for funding and sending assets externally. The exchange offers API access for automated trading and provides live charts and notifications. While praised for its growing asset selection and features like a referral program, limitations include a smaller altcoin list and potential lower liquidity on some pairs compared to major exchanges. Customer support is available, though response times can vary.

TheNewsCryptoHá 22m

Payodex Crypto Exchange Review: Features, Security, Deposits and Withdrawals

TheNewsCryptoHá 22m

Q2 Crypto Market Review: Did Bitcoin Rise for 'Nothing'? Did Money Flow to AI and On-Chain?

Q2 2026 Crypto Market Recap: Bitcoin's Gains Erased Amid Shift to AI and On-Chain Activity The second quarter of 2026 saw a significant reversal for the cryptocurrency market. Bitcoin gave back all its April gains, ending Q2 down approximately 11%, while major stock indices posted strong gains. This divergence was driven by a hawkish shift in Fed rate expectations, capital rotation into AI stocks, and weakening liquidity channels into crypto. Key demand pillars deteriorated simultaneously. Spot Bitcoin ETFs recorded net outflows of $4.08 billion for the quarter, with outflows dominating June. Crypto treasury entity Strategy's bitcoin accumulation slowed markedly, and the total stablecoin market cap contracted by ~$4.2 billion. This created a tighter liquidity environment. Exchange data reflected the downturn. Spot trading volumes fell 28% quarter-over-quarter. The market underwent significant deleveraging, with $8.35 billion in long liquidations for BTC and ETH, primarily in late May/early June. Open interest and order book liquidity also declined. Despite the bearish price action, structural developments point to an expanding on-chain ecosystem. These include the rise of tokenized stocks with full legal rights, the growth of RWA (real-world asset) perpetual contracts for trading stocks and commodities 24/7, and the use of crypto markets for price discovery ahead of major events like the SpaceX IPO. On-chain vaults are also emerging as a core layer for institutional capital allocation.

Foresight NewsHá 37m

Q2 Crypto Market Review: Did Bitcoin Rise for 'Nothing'? Did Money Flow to AI and On-Chain?

Foresight NewsHá 37m

‘Seems bearish’ – Circle slides 17% as Open USD enters the stablecoin race

Circle's stock (CRCL) plunged 17.5% on June 30, its largest daily drop since March. This sharp decline was triggered by the announcement of a new stablecoin competitor, Open USD (OUSD), backed by a consortium of 140 firms including Visa, Mastercard, and BlackRock. The market reacted bearishly on concerns that OUSD, targeting enterprise treasury and merchant payments, could challenge the market share dominance of Circle's USDC and Tether's USDT. Analysts noted the move could pressure Circle's revenue-sharing agreements and distribution. While Circle's market share had recently grown to 24%, the rise of new competitors like OUSD introduces uncertainty. Despite the sell-off, analysts maintain a consensus price target of $120 for CRCL, implying significant upside.

ambcryptoHá 43m

‘Seems bearish’ – Circle slides 17% as Open USD enters the stablecoin race

ambcryptoHá 43m

Trading

Spot