China-Based Hacker Group Steals $7M in Crypto via Wallet Supply Chain Attacks

TheNewsCrypto發佈於 2026-03-18更新於 2026-03-18

文章摘要

A Chinese hacker group operating under the name Wuhan Anshun Technology has been accused of stealing approximately $7 million in cryptocurrency through supply-chain attacks targeting users of wallets like Trust Wallet. The group used malicious browser extensions and compromised Electron-based apps to collect wallet information and transfer funds, primarily on Ethereum, BNB Chain, and Arbitrum. Details emerged after an internal member leaked information due to disputes over profit sharing, releasing evidence and expressing intent to surrender to authorities. While the case remains unconfirmed by officials, it highlights significant security risks in crypto software. Experts advise caution when updating or installing wallet-related tools.

A Chinese hacker collective has been charged with stealing about $7 million in cryptocurrency by using supply-chain attacks to target users of cryptocurrency wallets. According to reports, the group claimed to be a security services provider while operating under the name Wuhan Anshun Technology. On the other hand, members were allegedly conducting illicit operations to pilfer cryptocurrency assets. Wallets like Trust Wallet and other platforms are thought to have been targeted by the attackers.

How the Group works

The group works by using malicious browser extensions and compromised Electron-based apps with remote access tools. They helped collect wallet information and transfer funds. It mainly targeted blockchains such as Ethereum, BNB Chain, and Arbitrum.

The details of the operation came out after a member of the group leaked information. The person claimed there was a disagreement over profit sharing and unpaid compensation. After the disagreement, the individual reportedly released evidence of the operation and said they plan to surrender to authorities. Authorities have not officially confirmed the case, and no formal investigation details have been released so far.

This incident demonstrates that the software and tools used with the wallets are also risky. Experts advise exercising caution when updating software and refraining from installing unknown updates. The case highlights growing risks in crypto security, even though the claims have not yet been verified.

Highlighted Crypto News:

Juliana Stratton Defeats Crypto-Backed Krishnamoorthi in Illinois Senate Primary

TagsBlockchainchinaCryptocurrency

相關問答

QWhat is the name of the Chinese hacker group accused of stealing $7 million in cryptocurrency?

AThe group operated under the name Wuhan Anshun Technology.

QHow did the hacker group primarily carry out their attacks to steal cryptocurrency?

AThey used malicious browser extensions and compromised Electron-based apps with remote access tools.

QWhich specific blockchains were the main targets of this hacking group's attacks?

AThe group mainly targeted Ethereum, BNB Chain, and Arbitrum.

QWhat event led to the public disclosure of the group's operation details?

AA member of the group leaked information due to a disagreement over profit sharing and unpaid compensation.

QWhat precautionary advice do experts give in light of this incident?

AExperts advise exercising caution when updating software and refraining from installing unknown updates.

你可能也喜歡

Agent接管流量分发权,腾讯、字节、阿里在抢什么?

近日,腾讯、阿里、字节三大互联网巨头几乎同时加码AI智能体(Agent)布局,争夺AI时代的入口主导权。核心在于,谁掌握了Agent,谁就掌握了未来的流量分发权。 **阿里**采取“双子星”策略:千问App正演变为超级Agent,深度接入淘宝、支付宝等生态业务,实现从搜索到交易的全流程操作,并已向外部品牌开放接入;夸克则定位为AI旗舰应用,致力于成为“AI超级框”。在B端,阿里推出企业智能体平台“悟空”,探索“一人AI公司”模式。 **字节**凭借“豆包”App已获超3亿月活,并通过“扣子”平台构建开发者生态,支持多智能体协同。其战略是软硬一体,将豆包能力延伸至AI手机、智能眼镜等硬件,旨在让AI入口无处不在。 **腾讯**的杀手锏藏于微信。正在内测的微信AI智能体可通过右滑直接调用数百万小程序完成任务,将微信生态转化为“服务操作系统”。腾讯试图将AI深度融入现有国民应用,而非另造新入口。 三家的竞争折射出商业逻辑的深刻变化:流量分配权正从“用户自主点击”转向“Agent代为决策”。商业模式从争夺用户时长的“注意力经济”,转向以结果和效率为核心的“意图经济”。未来,服务提供者不仅比拼品牌,更需比拼其接入AI生态的能力。 这标志着从PC网页、移动App到AI Agent的又一次入口更迭,新一轮行业洗牌已然开始。

marsbit58 分鐘前

Agent接管流量分发权,腾讯、字节、阿里在抢什么?

marsbit58 分鐘前

从封杀豆包到拥抱荣耀,微信为什么突然“变脸”?

从严防死守到主动合作,微信对手机AI助手的态度在近期发生了180度转变。过去一年,微信曾封杀字节跳动豆包手机、限制OPPO“AI一键闪记”等功能,坚决反对第三方通过模拟点击操控微信。如今,微信却与华为、荣耀、小米等多家厂商合作,推出A2A(智能体到智能体)助手能力,允许用户通过系统AI助手直接发送微信消息、拨打语音电话。 这一转变源于腾讯在AI竞争中的焦虑。其AI应用“元宝”月活远低于竞争对手,而微信坐拥14亿月活和小程序生态,成为腾讯在AI时代的关键底牌。微信正内测AI智能体,旨在通过自然语言调用小程序服务,但需要打通手机系统这一首要AI入口。A2A合作让手机厂商的智能体作为“接线员”,将用户指令转交微信执行,腾讯借此既保住了生态控制权,又接入了系统级流量。 与之前被封杀的GUI(图形界面模拟操作)路线不同,A2A采用双重授权机制,通过标准化接口调用,微信在其中占据主导。手机厂商之所以愿意合作,是因为GUI强攻路线已被证明行不通,而A2A为其保留了在系统级AI场景中的发展空间,并有助于在激烈的行业竞争中快速提升AI整合能力。尽管存在数据隐私担忧,但A2A被视为比模拟点击更安全合规的路径。 这场合作本质是双方在AI入口争夺中的阶段性妥协:腾讯需要手机入口为微信AI引流,手机厂商则需要突破跨应用调用的合规瓶颈。长远看,腾讯试图将微信打造为AI“服务操作系统”,而手机厂商则希望用户深度依赖系统自带助手,双方生态战略的博弈将持续。AI时代的入口之争,已随着用户一句“帮我发微信”悄然展开。

marsbit2 小時前

从封杀豆包到拥抱荣耀,微信为什么突然“变脸”?

marsbit2 小時前

交易

現貨
合約
活动图片