SentinelOne: Вредоносное ПО Webrat крадет данные криптокошельков геймеров

cryptonews.ruPublicado em 2025-03-28Última atualização em 2025-05-28

Эксперты по кибербезопасности компании SentinelOne обнаружили новое вредоносное программное обеспечение под названием Webrat, нацеленное на геймеров и их криптовалютные кошельки.

По информации SentinelOne, Webrat представляет собой троян удаленного доступа (RAT), который распространяется через поддельные сайты, имитирующие популярные игровые платформы, такие как Steam, а также через фишинговые письма и вредоносные ссылки в игровых чатах.

Основная цель такой программы — кража конфиденциальной информации геймеров, которые активно участвуют в блокчейн-играх (Play-to-Earn) или используют криптовалюты для покупки внутриигровых предметов.

Согласно исследованию, Webrat способен перехватывать закрытые ключи и сид-фразы криптокошельков, включая учетные данные игроков, что позволяет злоумышленникам получать доступ к цифровым активам пользователей. Программа также собирает данные о банковских картах, паролях и другой информации.

Эксперты SentinelOne отмечают, что Webrat использует сложные методы сетевой маскировки, включая шифрование данных и динамическое изменение кода, что затрудняет его обнаружение антивирусами.

Аналитики центра киберугроз Solar 4RAYS добавили, что первые версии вредоноса появились в даркнете в начале 2025 года, и сейчас он доступен для покупки через закрытые каналы. При этом злоумышленники маскируют вредонос под другие приложения, а также распространяют его через ссылки в комментариях на YouTube.

Ранее блокчейн-обозреватель Cyvers Alerts сообщил, что неизвестный криптовалютный инвестор стал жертвой двойной фишинговой атаки, потеряв в совокупности около $2,5 млн в стейблкоинах Tether (USDT).

Leituras Relacionadas

Understanding Stablecoin Peg Deviations: What Actually Happens When a Digital Dollar Loses Its Link to the US Dollar

Stablecoin peg breakdowns occur because the code doesn't enforce a $1 value; it's an economic promise. Arbitrage by large traders (buying at a discount, redeeming for $1) maintains the peg. However, direct redemption is limited to large, verified clients, making general market confidence the true first line of defense. Four historical cases show different causes: USDT's 2018 drop was a trust issue; USDC's 2023 dip was a bank failure; xUSD's 2025 crash was due to risky yield strategies and a counterparty loss; and TerraUSD's 2022 collapse resulted from a flawed algorithmic design that triggered a death spiral. In 2026, a market-wide decline (total supply dropped ~$14.6B) is driven by new US regulations banning yield, reducing the arbitrage capital cushion that absorbs shocks. Market concentration remains high, with USDT and USDC comprising ~83% of the market, meaning any issue with either poses systemic risk. To interpret future de-pegs: identify the cause (reserve-backed coins tend to recover; algorithmic or yield-based models may not); monitor redemption processing, not just price; and watch for contagion to other protocols and assets, as seen with DAI during the USDC incident.

cryptonews.ruHá 2m

Understanding Stablecoin Peg Deviations: What Actually Happens When a Digital Dollar Loses Its Link to the US Dollar

cryptonews.ruHá 2m

Michael Saylor Identifies Bitcoin's 'Most Significant Breakthrough' in History

Michael Saylor, Executive Chairman of Strategy Inc., identifies Bitcoin's most significant breakthrough as its ability to transform economic energy into digital form and securely anchor it to individuals, families, companies, machines, or nations. He positions Bitcoin as a monetary technology enabling digital control of economic value, rather than merely a tradable cryptocurrency. This builds on his previous thesis describing Bitcoin as digital monetary energy, characterized by proof-of-work, fixed supply, digital transferability, and owner-controlled keys. Technically, Bitcoin does not legally tie coins to an identity but enables controlled digital ownership through cryptographic credentials. Ownership depends on securing private keys, which authorize transactions. While blockchain analysis allows for transaction tracking, Saylor's concept emphasizes the control aspect. Strategy Inc. serves as a corporate example, holding a large Bitcoin reserve. As of mid-August, the company reported owning 840,447 BTC. It has executed several sales in recent weeks. Saylor also outlines a four-tier digital money model with Bitcoin at the equity level. Beyond corporate adoption, U.S. banking regulators note increasing interest, with many recent bank charter applicants proposing digital asset-related activities, including stablecoin payments. Institutional analyses, like one from Fidelity Digital Assets, assess Bitcoin's properties such as scarcity and decentralization but caution about its speculative and volatile nature, without endorsing Saylor's energy metaphor.

cryptonews.ruHá 2m

Michael Saylor Identifies Bitcoin's 'Most Significant Breakthrough' in History

cryptonews.ruHá 2m

NFT Sales Surge 170% to $95.48 Million Over the Past Week

NFT sales surged by 170% over the past week to reach $95.48 million, largely driven by a single major transaction involving the hybrid NFT project Pandora. Pandora dominated the collections ranking with $55.21 million generated from just nine transactions, accounting for approximately 58% of all NFT sales in the past seven days. The number of buyers increased by 49% to 172,739, while sellers rose by 50% to 159,275. However, the total number of transactions saw only a 7.5% increase to 962,992. This indicates the sharp rise in dollar volume was not matched by a similar increase in transaction count, with the average transaction value rising to about $99 from $39 the previous week. Ethereum led among blockchains with $70.81 million in NFT sales, a 546% increase from the week before. Polygon followed in second place with $10.91 million in sales, down 9.54%, while Base took third with $4.59 million, up 107%, alongside an 86.74% increase in buyer addresses to 2,168.

cryptonews.ruHá 3m

NFT Sales Surge 170% to $95.48 Million Over the Past Week

cryptonews.ruHá 3m

Research shows: EU carbon taxes force Bitcoin miners to move to Russia

A study suggests that the EU's carbon pricing policies may be pushing Bitcoin mining operations to relocate, operationally, to Russia. The research analyzed daily emissions data and Bitcoin prices from 2019 to 2025, finding a statistical link between higher EU carbon prices and increased emissions in Russia. This correlation implies miners are shifting activity to Russia during low-demand hours to capitalize on the lack of a carbon tax there, maximizing profits. No similar link was found between the EU and the rest of the world. The study notes this is likely an operational shift—companies with equipment in both regions powering down in the EU and up in Russia—rather than physical relocation of hardware. Limitations include the impact of China's 2021 mining ban and other unaccounted factors. Furthermore, Russia's own regional bans on crypto mining, expanded to Moscow in 2025, could complicate this operational migration in the future.

cryptonews.ruHá 4m

Research shows: EU carbon taxes force Bitcoin miners to move to Russia

cryptonews.ruHá 4m

The Danger of Old Bookmarks: How an Expired Tornado Cash Domain Cost a User 1,000 ETH

A user lost over 1,010 ETH (worth millions) due to a phishing attack via an expired official domain of the Tornado Cash protocol. As reported on August 20, 2026, the domain `tornado.cash` was not renewed by the original developers amid U.S. OFAC sanctions and was subsequently registered by malicious actors. They deployed a fake frontend mimicking the legitimate Tornado Cash interface. Through this site, the attackers gained access to the user's deposit notes—the data required to withdraw funds from the protocol's pools—and drained the ETH within 12 hours. On-chain data shows the stolen funds (e.g., wallet 0xd8B356...) were withdrawn from Tornado Cash pools. However, on-chain analyst Specter cast doubt on the victim's story. He suggested the individual might be involved in illicit activity, noting that a large sum of BTC was received from a coin-mixing service (Whirlpool) and converted to ETH before being sent to the fake Tornado Cash site. The victim's explanation of urgently moving funds due to a compromised hardware wallet was questioned, as the fund trail indicated deliberate obfuscation. Specter speculated this might be a conflict between malicious actors rather than a simple phishing case. The incident highlights the danger of expired domains for major protocols, where old bookmarks can lead to compromised sites. WHOIS records show the domain was registered in March 2025. Broader analysis notes that in 2025, over $1.8 billion was lost to scams and exploits, largely through social engineering like phishing via familiar but hijacked links. This case underscores the persistent risk when a domain's legal status changes but user trust and search engine reputation remain.

cryptonews.ruHá 44m

The Danger of Old Bookmarks: How an Expired Tornado Cash Domain Cost a User 1,000 ETH

cryptonews.ruHá 44m

Trading

Spot
活动图片

Categorias popularesright-arrow

Etiquetas Popularesright-arrow