Google 发现 iOS 漏洞利用链,针对多家 CEX 及加密钱包应用

Gate News 消息,3 月 20 日,据 Google Threat Intelligence Group 监测,一种名为 DarkSword 的 iOS 漏洞利用链正针对运行 iOS 18.4 至 18.7 版本的 iPhone 手机。攻击者利用受损网站部署名为 Ghostblade 的恶意软件,该程序专门搜索并窃取多家主流加密货币交易所(包括某 CEX 等)及钱包应用(包括 Ledger、Trezor、MetaMask、Exodus、Uniswap、Phantom 和 Gnosis Safe)的数据。此外,Ghostblade 还会同步窃取短信、iMessage、联系人、Wi-Fi 密码、地理位置以及 Telegram 和 WhatsApp 的聊天记录等敏感信息。该恶意软件旨在进行快速数据窃取,在完成采集后会自动删除临时文件并终止运行。目前相关攻击活动已在沙特阿拉伯、土耳其、马来西亚和乌克兰等地被观察到。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Opmerking
0/400
Geen opmerkingen