China-Based Hacker Group Steals $7M in Crypto via Wallet Supply Chain Attacks

TheNewsCrypto发布于2026-03-18更新于2026-03-18

文章摘要

A Chinese hacker group operating under the name Wuhan Anshun Technology has been accused of stealing approximately $7 million in cryptocurrency through supply-chain attacks targeting users of wallets like Trust Wallet. The group used malicious browser extensions and compromised Electron-based apps to collect wallet information and transfer funds, primarily on Ethereum, BNB Chain, and Arbitrum. Details emerged after an internal member leaked information due to disputes over profit sharing, releasing evidence and expressing intent to surrender to authorities. While the case remains unconfirmed by officials, it highlights significant security risks in crypto software. Experts advise caution when updating or installing wallet-related tools.

A Chinese hacker collective has been charged with stealing about $7 million in cryptocurrency by using supply-chain attacks to target users of cryptocurrency wallets. According to reports, the group claimed to be a security services provider while operating under the name Wuhan Anshun Technology. On the other hand, members were allegedly conducting illicit operations to pilfer cryptocurrency assets. Wallets like Trust Wallet and other platforms are thought to have been targeted by the attackers.

How the Group works

The group works by using malicious browser extensions and compromised Electron-based apps with remote access tools. They helped collect wallet information and transfer funds. It mainly targeted blockchains such as Ethereum, BNB Chain, and Arbitrum.

The details of the operation came out after a member of the group leaked information. The person claimed there was a disagreement over profit sharing and unpaid compensation. After the disagreement, the individual reportedly released evidence of the operation and said they plan to surrender to authorities. Authorities have not officially confirmed the case, and no formal investigation details have been released so far.

This incident demonstrates that the software and tools used with the wallets are also risky. Experts advise exercising caution when updating software and refraining from installing unknown updates. The case highlights growing risks in crypto security, even though the claims have not yet been verified.

Highlighted Crypto News:

Juliana Stratton Defeats Crypto-Backed Krishnamoorthi in Illinois Senate Primary

TagsBlockchainchinaCryptocurrency

相关问答

QWhat is the name of the Chinese hacker group accused of stealing $7 million in cryptocurrency?

AThe group operated under the name Wuhan Anshun Technology.

QHow did the hacker group primarily carry out their attacks to steal cryptocurrency?

AThey used malicious browser extensions and compromised Electron-based apps with remote access tools.

QWhich specific blockchains were the main targets of this hacking group's attacks?

AThe group mainly targeted Ethereum, BNB Chain, and Arbitrum.

QWhat event led to the public disclosure of the group's operation details?

AA member of the group leaked information due to a disagreement over profit sharing and unpaid compensation.

QWhat precautionary advice do experts give in light of this incident?

AExperts advise exercising caution when updating software and refraining from installing unknown updates.

你可能也喜欢

比特币提现仍在继续:Coldcard冷钱包8年存储终成空

硬件钱包Coldcard遭黑客攻击,导致大量资金从易受攻击设备中被持续转出。据Galaxy Research数据,截至2026年8月2日,已有4585个地址被盗,损失总额达1367.05 BTC(约合8860万美元),远超7月30日最初报告的594.5 BTC。大部分被盗资金仍停留在攻击者地址。 问题根源并非固件,而是设备生成的种子短语存在漏洞。2021年3月起,因程序员错误集成libNgU库,设备从使用STM32硬件随机数生成器转为使用软件生成器Yasmarang,该生成器由公开可获取的芯片序列号和计时器状态初始化,导致生成的种子短语可在离线状态下被暴力破解。即使固件后续已更新,只要用户未将资金转移至基于新种子短语生成的新地址,旧钱包就始终处于风险中。 受影响的设备包括特定固件版本的Mk2/Mk3、Mk4/Mk5及Q系列。仅当种子短语是通过至少50次独立掷骰子或强唯一性BIP-39密码短语创建时方可幸免。官方建议受影响用户立即在已修复的固件上生成新种子短语并转移资产。 报道提及一位39岁投资者的案例,他因该漏洞损失了2 BTC(约13万美元)。他多年来通过体力劳动积攒比特币,将其视为在制裁和高通胀国家中的财务保障与提前退休的途径。此次事件使他的长期持有策略和“冷存储”信心遭受重击,他因此决定彻底退出加密货币领域。 从历史数据看,随机数生成器缺陷并非首例,类似问题曾导致巨额损失。此次事件警示,即使离线存储也未必绝对安全,其安全性高度依赖于底层硬件和算法的可靠性。

cryptonews.ru2小时前

比特币提现仍在继续:Coldcard冷钱包8年存储终成空

cryptonews.ru2小时前

交易

现货
活动图片