谨防诈骗：Discord 私信钓鱼手法分析

慢雾科技Опубліковано о 2022-05-18Востаннє оновлено о 2022-05-18

Анотація

各种钓鱼手法和事件层出不穷，用户要学会自己识别各种钓鱼手法避免被骗，项目方也要加强对用户安全意识的教育。

事件背景
5 月 16 日凌晨，当我在寻找家人的时候，从项目官网的邀请链接加入了官方的 Discord 服务器。在我加入服务器后立刻就有一个"机器人"(Captcha.bot)发来私信要我进行人机验证。这一切看起来相当的合理。我也点击了这个验证链接进行查看。

钓鱼手法分析
我访问"机器人"(Captcha.bot)发来的链接后，是有让我进行人机验证的，但是当我验证通过后，发现它要求唤起我的小狐狸(MetaMask)钱包，唤起的钱包界面挺真实的，如下图所示，但是我看到了钱包的地址栏显示"about:blank"这引起了我的警惕（平时审计了不少插件钱包），如果是插件唤起的就不会有这个"about:blank"的地址栏了。
接下来我随意输入了密码，并且通过审查元素查看，确定这个小狐狸(MetaMask)界面是由虚假网站"https://captcha.fm/"弹出的，并不是真实的钱包界面，于是我开始调试这个钱包。

在随意输入密码后，这个虚假的钱包界面进入到"Security Check"界面，要求我输入助记词进行验证。注意，输入的密码和和助记词会被加密发送到恶意站点的服务端。

通过分析域名可以发现，这恶意域名 captcha.fm 解析到了 172.67.184.152 和 104.21.59.223，但是都是托管在 cloudflare 上，只能是反手一个举报了。

分析恶意账号
下载保存好恶意站点的源码后，我将情报发给了项目方团队，并开始分析这次钓鱼攻击的账号。由于我刚加入家人群，就收到了下面的这个地址发来的验证消息。经过分析，这个账号是一个伪装成 Captcha.bot 机器人的普通账号，当我加入到官方服务器后，这个假 Captcha.bot 机器人立刻从官方服务器私发我假的人机验证链接（看着像是自动化识别新加入的用户，自动构造链接并私发钓鱼链接），从而引导我输入钱包密码和助记词。

我在相关频道里面搜索了 Captcha.bot，发现有好几个假 Captcha.bot，于是将这几个账号也一并同步给了项目方团队，项目方团队很给力，也很及时地进行了处理（此时已是凌晨了），把这几个假 Captcha.bot 删除了，并一起讨论了可能的防范方式。

再次收到钓鱼链接
事情还没结束，第二天早上又一位慢雾的小伙伴（感谢 @Victory 提供素材）加入到官方 Discord 服务器中，再次收到恶意账户发来的私信，里面包含着一个钓鱼链接，不同的是，这次的钓鱼者直接伪装成官方的账户发送私信。

这次钓鱼者讲的故事是在链接中导入助记词进行身份验证，然而不是采用假小狐狸(MetaMask)的界面来欺骗用户，而是直接在页面上引导用户输入助记词了，这个钓鱼手法就没这么真（钓鱼手法太粗糙）。
钓鱼网站的域名和 IP 是 app.importvalidator.org 47.250.129.219，用的是阿里云的服务，同样反手一个举报。

钓鱼防范方式
各种钓鱼手法和事件层出不穷，用户要学会自己识别各种钓鱼手法避免被骗，项目方也要加强对用户安全意识的教育。
用户在加入 Discord 后要在隐私功能中禁止服务器中的用户进行私聊。同时用户也需要提高自己的安全意识，学会识别伪装 MetaMask 的攻击手法（比如查看是否有地址栏，如果是插件发起的是没有地址栏的），网页唤起 MetaMask 请求进行签名的时候要识别签名的内容，如果不能识别签名是否是恶意的就拒绝网页的请求。在参与 Web3 项目的时候无论何时何地都不要在网页上导入私钥/助记词。尽可能地使用硬件钱包，由于硬件钱包一般不能直接导出助记词或私钥，所以可以提高助记词私钥被盗门槛。
项目方团队也要时刻关注社区用户的反馈，及时在社区 Discord 服务器中删除恶意账户，并在用户刚加入 Discord 服务器时进行防钓鱼的安全教育。
Discord 隐私设置和安全配置参考链接：
https://discord.com/safety/360043857751-Four-steps-to-a-super-safe-account
https://support.discord.com/hc/en-us/articles/217916488-Blocking-Privacy-Settings-

Пов'язані матеріали

DeFi Falls into the Most Dangerous Prisoner's Dilemma in History

ChainCatcher author Gu Yu analyzes the severe fallout from the Kelp DAO exploit, which has triggered a crisis of confidence across the DeFi ecosystem, implicating major projects like Aave, LayerZero, and Arbitrum. The attack, attributed to the Lazarus Group, exploited a single-validator (1/1) configuration in LayerZero’s decentralized verification network (DVN), leading to over $40M in losses. LayerZero’s official report claimed its protocol “operated as expected” and deflected blame onto Kelp DAO’s configuration choices, sparking backlash from developers and researchers who criticized its avoidance of responsibility. Meanwhile, Arbitrum’s security committee intervened by using a privileged transaction to freeze and recover ~30,766 ETH ($71M) from the hacker’s address—a move praised for pragmatism but criticized for undermining Layer2 decentralization ideals. The incident has intensified debates on cross-chain bridge security, Layer2 centralization risks, and the tension between practical security measures and decentralized principles. With Aave facing ~$200M in bad debt and no clear compensation plan from Kelp DAO or LayerZero, the situation reflects a dangerous “prisoner’s dilemma” where key players prioritize self-interest over collective trust, threatening foundational DeFi narratives.

marsbit9 хв тому

DeFi Falls into the Most Dangerous Prisoner's Dilemma in History

marsbit9 хв тому

Not Speculation but a Necessity: The 4 Unique Values of Prediction Markets

Polymarket's recent $4 billion funding round and soaring valuation of $15 billion highlight the explosive growth of prediction markets, with trading volume reaching $25.7 billion in March 2026—a 10.6% monthly increase. This analysis argues that prediction markets serve critical non-speculative functions, positioning them as essential tools rather than mere gambling platforms. Prediction markets offer four unique values: entertainment consumption, insurance-like protection, risk hedging, and truth discovery. Firstly, they stimulate economic activity by engaging users in event-based betting, similar to the broader sports industry. Secondly, they act as a form of decentralized insurance, allowing users to hedge against specific, well-defined risks (e.g., weather events) transparently and without traditional overhead costs. Thirdly, institutions and individuals use these markets to hedge against geopolitical and commodity price risks, as demonstrated during the U.S.-Iran conflict and the launch of 24/7 commodity markets on platforms like Kalshi. Finally, prediction markets counter media bias by aggregating crowd-sourced information, often achieving 30% higher accuracy than surveys due to users' vested interests. Experts like Bitwise’s Jeff Park and SIG’s Jeff Yass emphasize the markets' role in risk transfer and financial innovation. As these platforms evolve, they are poised to become trillion-dollar markets, offering more reliable, decentralized mechanisms for information pricing and risk management.

marsbit9 хв тому

Not Speculation but a Necessity: The 4 Unique Values of Prediction Markets

Polymarket's recent $4 billion funding round, valuing it at $15 billion, highlights the explosive growth of prediction markets, with trading volume surging from $8.7 billion to $25.7 billion in just a few months. This article argues that prediction markets are not merely speculative gambling platforms but serve four core functions. First, they act as a form of entertainment and consumption, stimulating economic activity similar to the sports industry. Second, they provide a form of limited insurance, allowing users to hedge against specific, well-defined risks (e.g., weather events) in a transparent, cost-effective manner without traditional insurance overhead. Third, they are powerful tools for risk hedging, enabling both individuals and institutions to mitigate exposure to volatile events like commodity price swings and geopolitical crises. Finally, prediction markets can function as "truth machines," aggregating crowd wisdom to counter media narratives and biases, with some claims suggesting a 30% higher accuracy over traditional surveys. The piece concludes that the role and potential value of prediction markets are far greater than commonly perceived, positioning them as a significant future market.

Odaily星球日报24 хв тому

Interview with Jeff Hoffman: How Web3 and AI Are Reshaping the Trillion-Dollar Social Travel Market

Interview with Jeff Hoffman: Web3 and AI Reshaping the Trillion-Dollar Social Travel Market Jeff Hoffman, co-founder of Priceline, discusses how Web3 and AI are transforming the social travel industry. He highlights that the current travel market is fragmented and inefficient, dominated by traditional online travel agencies (OTAs) that act as intermediaries with opaque models. Web3 introduces direct connections, transparency, and faster settlements, shifting value back to travelers. Key trends driving this change include demand for flexible rewards, digital payments, and trust in communities over ads. Hoffman joined Staynex not for its Web3 label, but because it addresses industry inefficiencies by integrating booking, payments, AI-driven itineraries, and rewards into a single ecosystem. This Web2.5 model combines Web2 scale with Web3 incentives. He emphasizes the team’s focus on execution over hype as a key reason for his involvement. Looking ahead, blockchain will enable transparent rewards and seamless cross-border payments, while AI provides personalization. Together, they will turn travel into a continuous relationship rather than a transaction. Hoffman predicts traditional OTAs will persist, but value will shift to platforms that own payment, loyalty, and community networks. Social travel represents a significant, underestimated opportunity in Web3.

marsbit39 хв тому

Interview with Jeff Hoffman: How Web3 and AI Are Reshaping the Trillion-Dollar Social Travel Market

marsbit39 хв тому

Rare Evo 2026 Returns to Las Vegas as the Industry’s Premier Cross-Chain Blockchain Event, Spotlighting Policy, Regulation, and Institutional Adoption

Rare Evo 2026, one of the fastest-growing blockchain conferences, will return to the ARIA Resort & Casino in Las Vegas from July 28–31, 2026. The event will focus on policy, regulation, and the convergence of traditional finance with blockchain infrastructure. It will bring together leaders from DeFi, Layer 1 ecosystems, institutional finance, government, and enterprise to foster crucial industry dialogue. Key themes include global regulatory frameworks, U.S. policy developments, institutional onboarding, and the role of traditional finance in Web3. With expected attendance of 3,000–4,000, the conference will feature keynotes, panels, workshops, hackathons, and networking events, serving as a neutral platform for collaboration across the digital asset ecosystem.

TheNewsCrypto1 год тому

Rare Evo 2026 Returns to Las Vegas as the Industry’s Premier Cross-Chain Blockchain Event, Spotlighting Policy, Regulation, and Institutional Adoption

TheNewsCrypto1 год тому

Торгівля

Спот

Ф'ючерси