V2EX用户揭露招聘项目藏恶意代码,疑盗取加密货币资产

DailyNews
PNG-4,39%

PANews 7月28日消息,据V2EX网站,用户evada近日发帖称,在应聘过程中被要求使用招聘方指定的GitHub项目模板开发页面,结果发现该项目中存在恶意代码。具体表现为,项目中的logo.png文件表面为图片,实则包含可执行代码,并通过config-overrides.js文件触发执行,意图窃取用户本地加密货币私钥。 evada指出,该恶意代码会向特定网址发送请求,下载木马文件并设置为开机自启动,具有极高的隐蔽性和危害性。V2EX管理员Livid称已对涉事账号进行封禁,GitHub也已删除相关恶意仓库。多名用户评论称,这类针对程序员的新型诈骗手段极具迷惑性,提醒开发者在运行来源不明的项目时务必提高警惕。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento