Эксперты: новое вредоносное ПО Cthulhu крадет ключи от криптокошельков в MacOS

cryptonews.ru2024-06-26 tarihinde yayınlandı2024-08-26 tarihinde güncellendi

Аналитики Cado Security предупредили пользователей MacOS о новом вредоносном программном обеспечении.
ПО, известное под названием Cthulu Stealer, крадет ключи от криптокошельков и распространяется в рамках модели Malware-as-a-Service.
Создатели вируса сдают в аренду свою разработку через Telegram-группу за $500 в месяц.

Аналитики компании Cado Security выявили новое вредоносное программное обеспечение, которое представляет угрозу для пользователей операционной системы MacOS. Вирус нацелен на кражу личных данных и ключей от криптокошельков.

Программа известна как Cthulhu Stealer. ПО распространяется в качестве образа диска Apple (DMG) и при попадании в компьютерную систему маскируется под легальное ПО — CleanMyMac, Grand Theft Auto IV или Adobe GenP.

После активации программы она выполняет команду osascript, запрашивая у пользователя системный пароль и учетные данные кошелька. Параллельно Cthulhu Stealer создает каталог ‘/Users/Shared/NW’ для хранения полученной информации.

Главная задача вредоносного ПО — кража личных данных из различных источников. К ним относятся игровые аккаунты, браузер, криптовалютные кошельки и другие места хранения информации.

Аналитики отмечают схожесть Cthulhu Stealer с еще одним хакерским программным обеспечением. Речь идет об Atomic Stealer, который аналогичным образом похищал данные через MacOS, и был выявлен экспертами в 2023 году. Специалисты считают, что новое ПО — это, вероятно, модифицированная версия предыдущей вредоносной программы.

Создатели Cthulhu Stealer используют особую схему распространения своей разработки. Для этого они создали Telegram-группу, в которой предлагают взять вирус в аренду за $500 в месяц. Такая схема называется Malware-as-a-Service (MaaS).

Помимо средств за «подписку» на вредоносное ПО, хакеры получают процент от краж. Они также обеспечивают развертывание программного обеспечения и оказывают техническую поддержку своих клиентов.

Отметим, что создатели Cthulhu Stealer, по информации экспертов, недавно столкнулись с трудностями. Некоторые партнеры главного разработчика вируса, известного по прозвищу Balaclavv, пожаловались на задержку по платежам. В итоге программное обеспечение от этого хакера заблокировали как минимум на одной из площадок по продаже вредоносного ПО, утверждают в Cado Security.

Напомним, мы писали, что злоумышленники использовали расширение Chrome для атак на пользователей Solana.

İlgili Okumalar

Can Open USD Support Stripe's Ambitions?

Can Open USD support Stripe's ambition? The article argues that OUSD represents a pivotal strategic move for Stripe, shifting its narrative from being a superior payments API company to becoming a "money movement network." Unlike simply facilitating payments, this new model aims to organize and define the settlement layer, default assets, and economic distribution rules for future commerce. The analysis highlights OUSD's role in giving Stripe a potential default settlement asset, enabling deeper economics through reserve earnings, and providing a programmable money layer for emerging use cases like AI agentic commerce. Crucially, OUSD is presented not as a direct "USDC killer" but as an attempt to redefine the business model of stablecoins, proposing a collaborative governance structure where contributing partners share in the network's economic benefits and governance. For Stripe, this is about evolving from a powerful "abstraction layer" over traditional financial rails into an active participant and potential architect of the next-generation global settlement network. While OUSD alone cannot immediately realize this ambition, it signals Stripe's intent to move closer to the money layer itself, positioning itself at the center of future money flows in an increasingly automated, platform-driven, and AI-powered economy. The ultimate question is whether Stripe can transition from being a best-in-class payment processor to becoming the foundational infrastructure for internet-native money movement.

marsbit4 dk önce

Can Open USD Support Stripe's Ambition?

The article explores whether the newly announced Open USD (OUSD) stablecoin can support Stripe's strategic ambition to evolve beyond a payment API company into a "money movement network." It argues that OUSD is not an immediate "USDC killer" but serves as a crucial narrative shift for Stripe. The stablecoin, launched by the independent entity Open Standard with backing from Stripe, Visa, Mastercard, and others, represents an attempt to redefine the economics and governance of stablecoins by sharing reserve asset yields with distributing partners. For Stripe, OUSD is a key piece in moving from simply abstracting traditional financial rails (like card networks) to potentially defining a new settlement layer for global commerce. This aligns with Stripe's broader strategy involving its acquisitions (like Bridge for stablecoin issuance) and projects (like Tempo for payments-focused blockchain) to position itself for "agentic commerce," where AI agents and software conduct automated transactions. The article concludes that while OUSD alone cannot instantly transform Stripe's business, it concretely signals the company's ambition to organize the future infrastructure of money movement, where value may ultimately settle on a network it helped shape.

链捕手11 dk önce

链捕手11 dk önce

This Week's Crypto Watchlist｜Jupiter, NEAR, Jito, and 7 Other Projects are Active. Understand Who's Worth Monitoring with a 'Catalyst Calendar'

This week brings a concentrated wave of catalysts for several crypto projects, based on a schedule compiled by an analyst. Jupiter (JUP) leads by launching a private testnet for its GUM unified market on July 6th, aiming to aggregate diverse assets on Solana. On July 7th, NEAR hosts a major livestream reveal focused on enterprise "black box" tech, likely detailing its SPICE upgrade. Also on July 7th-8th, Berachain executes its largest mainnet upgrade, "PoL Next," simplifying its tokenomics by retiring the BGT token and consolidating value into BERA. Zcash (ZEC) eyes recovery with its critical Ironwood network upgrade slated for July 21st, designed to restore trust after a recent privacy vulnerability scare. Looking ahead, Lighter (LIT) plans to launch tokenized stocks next week, leveraging its key position as the default perpetual DEX on the new Robinhood Chain. Jito (JTO) is rumored to launch its JTX trading platform in mid-July, targeting professional traders and promising substantial protocol revenue sharing. Lastly, Ether.fi (ETHFI) has proposed deploying a dedicated Aave V4 instance to power its EtherFi Cash Visa card, though this remains in the early governance stage. The week presents a mix of product launches, major upgrades, and strategic expansions, each carrying its own potential for momentum and associated risks like token unlocks or execution challenges.

marsbit17 dk önce

This Week's Crypto Watchlist｜Jupiter, NEAR, Jito, and 7 Other Projects are Active. Understand Who's Worth Monitoring with a 'Catalyst Calendar'

marsbit17 dk önce

Bitcoin Rebounds As Softer Jobs Data Lifts Rate-Cut Hopes

Bitcoin rebounded as softer U.S. jobs data strengthened market expectations for Federal Reserve interest rate cuts. The report indicated a cooling labor market, which could make rate reductions easier to justify if inflation remains manageable. Lower rates typically support risk assets like Bitcoin by improving liquidity expectations and reducing the appeal of cash. However, the positive macro sentiment must contend with ongoing supply-side pressures for Bitcoin. These include large BTC transfers from government wallets and upcoming Mt. Gox repayments, which have made traders sensitive to potential selling pressure. While the market is currently viewing the weak jobs data as supportive, the sustainability of this rally will be tested if significant coin movements toward exchanges occur or if Fed officials push back against aggressive rate-cut forecasts.

bitcoinist21 dk önce

Bitcoin Rebounds As Softer Jobs Data Lifts Rate-Cut Hopes

bitcoinist21 dk önce

How Token Economy Reshapes the Business Rules of AI 'Measurement' | ToB Industry Observation

"Token Economy: How It Reshapes the Business Rules of AI's 'Metrics' | ToB Industry Observation" The article discusses how the token economy is fundamentally changing the business landscape for AI, moving from a phase of explosive technical supply to a focus on measurable value for enterprise demand. It highlights the astronomical growth in daily token usage in China, framing tokens as the new "measurement standard" or "electricity" of the intelligent era. A central challenge is determining a token's value, which varies drastically—up to 100,000x—across different applications, from drug discovery to casual chat. The concept of "high-quality tokens" that deliver real intelligence, versus "noise," is emphasized as crucial. Lenovo's Vice President shares three proposed "laws" of token economics: 1. **Law of Inertia:** The cost per token will continuously decline due to technological innovation, system optimization, and intelligent runtime scheduling. 2. **Law of Acceleration:** The value generated per token accelerates based on the depth of AI integration into business workflows, the level of engineering support, and organizational readiness. 3. **Law of the Singularity:** A tipping point where the value curve of AI application surpasses its cost curve, shifting from cost-saving to generating incremental, previously impossible value—enabling "innovation at scale." The article notes real-world struggles, such as companies exceeding AI budgets due to unpredictable token pricing and "token inflation" from agentic AI workflows. Solutions being explored include standardized metrics for token quality, transparent pricing, and new infrastructure like "Token Factories" for efficient, on-demand token production. The ultimate goal is for businesses to move past anxiety and reach the "singularity," where AI drives scalable innovation, akin to how electricity enabled countless modern appliances.

marsbit31 dk önce

How Token Economy Reshapes the Business Rules of AI 'Measurement' | ToB Industry Observation

marsbit31 dk önce

İşlemler

Spot