Bitrefill 披露 3 月 1 日遭网络攻击,疑似朝鲜黑客 Lazarus Group 所为

Gate News 消息,3 月 18 日,加密货币电商和礼品卡公司 Bitrefill 披露,其于 3 月 1 日遭遇网络攻击,疑似由朝鲜支持的黑客组织 Lazarus Group 实施。攻击源于一名员工笔记本电脑被入侵,黑客窃取了部分热钱包资金,并向其供应商进行了可疑采购。攻击者还侵入了 Bitrefill 的更广泛基础设施,包括部分数据库和某些加密货币钱包,导致约 18,500 条购买记录被访问,涉及邮箱、加密支付地址和 IP 地址等有限客户信息。其中约 1,000 条记录的加密客户姓名存在暴露风险,公司已联系相关个人。Bitrefill 表示,对于大部分购买不强制要求 KYC,涉及 KYC 的数据仅由外部 KYC 提供商保管,公司系统中无备份。调查显示攻击者并未提取整个数据库,仅执行了有限查询以探查可窃取的目标,包括加密货币和礼品卡库存。公司自行承担运营资本中的任何损失,并与 zeroShadow、SEAL911 等安全团队合作应对。目前支付、库存和账户功能已基本恢复正常,销售额也已恢复。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento