Snap Store 出现安全漏洞，黑客可通过劫持过期域名盗取用户加密资产

GateNews

2026-01-21 04:07:01

ChainCatcher 消息，据慢雾科技首席信息安全官 23pds 披露，Linux 平台的 Snap Store 应用商店出现新型安全漏洞，黑客通过劫持过期域名接管应用发布者账号，将恶意代码植入加密钱包应用。

攻击者监控并注册 Snap Store 中关联域名已过期的开发者账号，利用这些域名邮箱触发密码重置，从而接管建立长期信誉的发布者身份。被篡改的应用伪装成 Exodus、Ledger Live 或 Trust Wallet 等知名加密钱包，界面与正版几乎无差别。

目前已确认 storewise[.]tech 和 vagueentertainment[.]com 两个发布者域名被劫持。这些恶意应用会诱导用户输入"钱包恢复助记词"，一旦用户提交，敏感信息将被传至攻击者服务器，导致数字资产被盗。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Opmerking

0/400

Geen opmerkingen