CoinMarketCap «выявила и удалила» вредоносный мошеннический кошелек

cryptonews.ruОпубліковано о 2023-08-21Востаннє оновлено о 2025-06-21

Команда агрегатора данных криптовалюте сообщила, что вредоносный код всплывающего окна, требовавшего от пользователя подключения кошелька, был удален, но расследование инцидента все еще продолжается.

CoinMarketCap, сайт отслеживания цен на криптовалюты, как сообщается, удалил вредоносное всплывающее уведомление на своем сайте, предлагающее пользователям подтвердить свои криптовалютные кошельки, согласно сообщению в его официальном аккаунте X.

«Мы выявили и удалили вредоносный код с нашего сайта», — сообщил CoinMarketCap в сообщении в пятницу.

«Наша команда продолжает расследование и принимает меры для усиления нашей безопасности», — добавили в нем.

Обновление появилось менее чем через три часа после того, как CoinMarketCap опубликовал первое сообщение о фишинговом окне на сайте в ответ на многочисленные сообщения, распространяющихся в социальных сетях.

«Мы знаем, что на нашем сайте появилось вредоносное всплывающее окно с предложением пользователям «верифицировать кошелек», — заявил CoinMarketCap в то время.

Несколько пользователей криптовалют сообщили, что вредоносное окно было частью фишинговой атаки, призванной получить доступ к закрытым ключам или данным кошельков.

Такие окна часто используют для подключения к кошелькам и последующего запроса одобрения на перевод ERC-20 токенов, как отметил пользователь Аури.

Хакеры обычно взламывают доверенные учетные записи или создают поддельные страницы, чтобы распространять ссылки, выглядящие легитимными.


Источник: Джеймсон Лопп.

Пользователь криптовалюты Аури сказал, что уведомление «просит подключить кошелек, а затем запрашивает одобрения для токенов ERC-20».

CoinMarketCap предупредил пользователей не подключать свои кошельки и повторил, что они работают над «решением проблемы».

MetaMask и Phantom быстро обнаружили проблему

Пользователь криптовалюты Джет заявил, что кошельки MetaMask и Phantom Wallet уже выдали предупреждения о небезопасности CoinMarketCap.

По данным исследователей, расширение Phantom показывает пользователям уведомление: «Этот сайт небезопасен для использования».


Phantom предупредил своих пользователей, что веб-сайт в настоящее время «небезопасен для использования». Источник: Phantom/CoinMarketCap.

Инцидент безопасности произошел почти через четыре года после утечки данных на CoinMarketCap в октябре 2021 года, когда злоумышленники получили более 3,1 млн адресов электронной почты пользователей.

Доступ к этим данным был обнаружен позже в продаже на хакерских форумах. Это стало известно благодаря Have I Been Pwned, платформе, которая отслеживает утечки и компрометацию онлайн-аккаунтов.

Bitcoin
#Altcoin
#Hackers
#CoinMarketCap

Пов'язані матеріали

IBIT Records $1.3 Billion Outflow in a Single Week, Bitcoin's Largest ETF Becomes a Wall of Selling Pressure That Bulls Must Break Through

BlackRock's iShares Bitcoin Trust (IBIT), the largest U.S. spot bitcoin ETF, saw $1.3 billion in net outflows for the week ending June 26, accounting for roughly 73% of total ETF outflows ($1.79B). This significant, concentrated selling pressure from the primary vehicle that previously funneled institutional demand into bitcoin is now testing the market at a key support level near $60,000. The article notes a narrative shift: the same ETF that served as a major entry ramp for compliant investment is now operating in reverse as a potential exit lane. While ETF outflows represent a transmission risk rather than direct spot selling, they create a new structural headwind. Bitcoin's next move hinges on whether non-ETF buyers can absorb this pressure. Two scenarios are presented: if IBIT outflows slow and bitcoin reclaims the $59,000-$62,000 range, the event could be seen as a clearing of weak hands. However, if IBIT continues to lead significant redemptions while bitcoin struggles to hold $60k, the ETF complex itself may become a persistent source of selling pressure, challenging the long-held "institutional demand" thesis. The coming trading sessions will determine if this is a one-time purge or the start of sustained outflows.

marsbit19 хв тому

IBIT Records $1.3 Billion Outflow in a Single Week, Bitcoin's Largest ETF Becomes a Wall of Selling Pressure That Bulls Must Break Through

marsbit19 хв тому

Pump.fun surges 12% as holder count hits record high – 2 metrics could cap gains

The token of memecoin launch platform Pump.fun (PUMP) surged 12% as sentiment improved alongside renewed interest in memecoins. On-chain data showed strong investor participation, with the holder count reaching a record high of 122,440. Total Value Locked (TVL) also saw a significant increase of roughly $15.7 million, rising to $217.7 million and indicating fresh capital inflows. However, key protocol performance metrics contrasted with this positive price action and investor growth. Data revealed substantial declines in launchpad volume (down 86.7% to $5.8M), generated fees (down 35.6% to $587,200), and protocol revenue (down 23% to $147.8M). These drops suggest underlying user activity and platform utility remain weak. While the recent surge is supported by growing holder numbers and TVL, the sustainability of the rally is uncertain. For gains to be firmly supported, a recovery in fundamental protocol usage metrics is likely needed.

ambcrypto21 хв тому

Pump.fun surges 12% as holder count hits record high – 2 metrics could cap gains

ambcrypto21 хв тому

"King of Shilling" Hayes Strikes Again, This Time Setting His Sights on Deribit

On June 29, BitMEX co-founder Arthur Hayes acquired approximately 6.16 million SYN tokens via OTC platform Flowdesk, valued at around $2.2 million. Subsequently, Hayes publicly endorsed SYN on X, calling it one of the most asymmetric investments he's seen since HYPE and declaring it time for an on-chain options DEX to challenge industry leader Deribit, naming Hypercall as that challenger. The article details the evolution of the Synapse Protocol, originally launched in 2021 as a cross-chain messaging and liquidity network. While its TVL peaked above $1 billion during the last bull market, it has since declined. The protocol's team has since built Hypercall, an on-chain options trading platform on Hyperliquid's HyperEVM, which supports trading options on "any asset" with features like 24/7 trading and defined risk limited to the premium paid. Deribit, founded in 2016, is highlighted as the dominant centralized crypto options exchange, commanding roughly 85% market share in BTC and ETH options. Its strengths include deep liquidity and professional tools, though it faces critiques over custody risk, KYC requirements, and regulatory uncertainty. The analysis suggests Hypercall's potential lies in decentralization, permissionless access, and transparency, potentially carving a niche in DeFi-native and emerging asset options. However, it faces significant challenges competing with Deribit's established network effect and liquidity depth. The piece concludes by noting Hayes's recent and mixed "call" history, referencing his previous promotion and subsequent sale of HYPE, as well as a controversial price target report for CARDS from his family office, Maelstrom, which was followed by a significant price drop for the asset. This activity has drawn criticism, with some accusing Hayes of creating exit liquidity for his followers.

Foresight News30 хв тому

"King of Shilling" Hayes Strikes Again, This Time Setting His Sights on Deribit

Foresight News30 хв тому

One Year After the Crash of Crypto Treasury Companies, Copycats Are Already Making a Comeback

One year after the collapse of digital asset treasury (DAT) companies, which wiped out up to 99% for early investors, the scheme has returned in a new guise. Recently, Triller Group announced it would become a "SpaceX treasury company," causing its market cap to surge. This follows the rebranding of another firm, LGHL, now targeting a token called HYPE. The original model, popularized by MicroStrategy (MSTR) and its "Bitcoin yield" narrative, saw companies trading at massive premiums to their underlying crypto holdings. However, most followers like TwentyOne, Metaplanet, and Nakamoto have crashed 80-95%+ from their peaks, erasing nearly all value for late investors. The author argues these structures have no fundamental reason to trade at premiums when low-fee Bitcoin ETFs or direct ownership exist. The cycle persists due to speculative demand driven by FOMO, gamification, and a belief the system is rigged, met by insiders and promoters who profit from the pump-and-dump dynamics. Drawing a parallel to the 1637 Tulip Mania, the piece concludes that such frenzies are not a bug but a recurring product of markets, where greater fools provide demand and insiders supply the schemes. Despite holding Bitcoin personally, the author condemns this specific packaging of assets into leveraged corporate vehicles marketed as innovation, a cycle seemingly unstoppable until a major crash.

marsbit41 хв тому

One Year After the Crash of Crypto Treasury Companies, Copycats Are Already Making a Comeback

marsbit41 хв тому

This Afternoon, South Korea Will Bet the Nation's Destiny for the Next Decade

South Korean President Lee Jae-myung's office announced on Sunday that Samsung and SK Group will unveil major investment plans on Monday. South Korean media reports indicate the plan involves a massive 200 trillion won (approx. $1.3 trillion USD) investment over the next decade, primarily focused on expanding domestic semiconductor manufacturing. This includes Samsung and SK Hynix building multiple new semiconductor fabrication plants and facilities across several regions in South Korea. This investment represents a strategic, government-backed move to solidify South Korea's position in the global AI infrastructure race. It reflects a belief that AI-driven demand for high-performance memory, especially High Bandwidth Memory (HBM), is not a short-term boom but a sustained, decade-long industry wave. Historically a highly cyclical sector, the memory industry's dynamics are being tested by the unprecedented demand from AI development. This investment is a bet that AI can fundamentally extend the cycle's duration or alter its nature. While the scale of the investment is staggering—nearly 70% of South Korea's annual GDP—the core question remains: whether AI can truly eliminate the memory industry's inherent cyclicality. Only time will tell if this monumental wager on AI's future will secure South Korea's long-term dominance.

Odaily星球日报1 год тому

This Afternoon, South Korea Will Bet the Nation's Destiny for the Next Decade

Odaily星球日报1 год тому

Торгівля

Спот
活动图片