BNB Chain X konts uzbrukuma m\u0113r\u0137is: hakeri izmantoja fikt\u012bvus saites<\/p>\n
Kiberdro\u0161\u012bbas pasaule satricin\u0101ta, jo ofici\u0101lais BNB Chain konts platform\u0101 X, kas lepoj\u0101s ar gandr\u012bz 4 miljoniem sekot\u0101ju, tika kompromit\u0113ts. \u0160\u012b uzlau\u0161ana, kas notika nesen, izrais\u012bja virkni aptuveni desmit \u013caunpr\u0101t\u012bgu zi\u0146u, kuru m\u0113r\u0137is bija izvilin\u0101t lietot\u0101ju l\u012bdzek\u013cus, izmantojot safabric\u0113tas saites, kas mudin\u0101ja piesl\u0113gt savus kriptoval\u016btu makus caur WalletConnect.<\/p>\n
Hakeru sh\u0113mas un zaud\u0113jumi<\/p>\n
\u0160\u012bs uzbrukuma sekas bija diezgan dr\u016bmas, jo Binance lietot\u0101ji kopum\u0101 zaud\u0113ja aptuveni 8 000 l\u012bdz 13 000 ASV dol\u0101ru. Starp visizcil\u0101kajiem un d\u012bvain\u0101kajiem viltojumiem bija zi\u0146a ar uzrakstu “4 dol\u0101ri par m\u0113mu” un Binance dibin\u0101t\u0101ja \u010canpena \u010c\u017eao (CZ) fotogr\u0101fiju, kas novirz\u012bja lietot\u0101jus uz kr\u0101pnieku maka adresi. \u010canpens \u010c\u017eao pats publiskoja \u0161o inform\u0101ciju sav\u0101 emu\u0101r\u0101, piebilstot, ka hakeris, visticam\u0101k, izv\u0113l\u0113jies “\u012bso ce\u013cu” nevis rad\u012btu kaut ko v\u0113rt\u012bgu, par sp\u012bti krimin\u0101l\u0101s atbild\u012bbas riskam.<\/p>\n
Atbildes reakcija un izmekl\u0113\u0161ana<\/p>\n
Par laimi, BNB Chain un Binance komandas \u0101tri rea\u0123\u0113ja, atg\u016bstot kontroli p\u0101r uzlauzto kontu. Tika veikti pas\u0101kumi, lai dz\u0113stu visas kait\u012bg\u0101s zi\u0146as, un uz\u0146\u0113mums ir apsol\u012bjis piln\u012bb\u0101 kompens\u0113t zaud\u0113jumus cietu\u0161ajiem lietot\u0101jiem. K\u0101 skaidroja CZ, dro\u0161\u012bbas komanda akt\u012bvi izmekl\u0113 \u0161o incidentu, un ir spekul\u0101cijas, ka uzlau\u0161ana var\u0113tu b\u016bt saist\u012bta ar KYC (Know Your Customer) proced\u016bru p\u0101rk\u0101pumiem, kas liecina par iesp\u0113jamu iek\u0161\u0113ju piek\u013cuves punktu izmanto\u0161anu.<\/p>\n
Inferno Drainer un masveida kr\u0101pniec\u012bbas<\/p>\n
\u0160\u012b sh\u0113ma ir saist\u012bta ar pla\u0161i paz\u012bstamo kiberdro\u0161\u012bbas t\u012bklu Inferno Drainer, kas ir specializ\u0113jies masveida fikt\u012bvu kampa\u0146u organiz\u0113\u0161an\u0101. Hakeri taktiski izmantoja viltotus dom\u0113na v\u0101rdus ar “spogu\u013crakst\u0101” l\u012bdz\u012bgiem burtiem (piem\u0113ram, aizst\u0101jot “i” ar “l”), lai maldin\u0101tu lietot\u0101jus un piespiestu vi\u0146us neatgriezeniski pie\u0161\u0137irt piek\u013cuvi saviem kriptoval\u016btu maci\u0146iem. Dro\u0161\u012bbas firmas, tostarp SlowMist, ir publiskoju\u0161as detaliz\u0113tu tehnisko anal\u012bzi un pied\u0101v\u0101ju\u0161as operat\u012bvus risin\u0101jumus, lai nov\u0113rstu l\u012bdz\u012bgus uzbrukumus n\u0101kotn\u0113.<\/p>\n
Liel\u0101ks uzbrukumu vilnis un riski<\/p>\n
Binance vienm\u0113r ir bijusi vilino\u0161s m\u0113r\u0137is hakeriem, un uzbrukums BNB Chain ir tikai viens piem\u0113rs pla\u0161\u0101kai tendencei. P\u0113d\u0113jo m\u0113ne\u0161u laik\u0101 desmitiem z\u012bmolu ir cietu\u0161i no uzlau\u0161anas uz X. Piem\u0113ram, MicroStrategy konts tika izmantots, lai reklam\u0113tu neeksist\u0113jo\u0161us airdropus, bet OpenAI preses dienesta konts tika izmantots, lai populariz\u0113tu “spoku” mar\u0137ieri. Janv\u0101r\u012b k\u0101ds uzbrukums \u013c\u0101va hakeriem piek\u013c\u016bt Nasdaq kontam un palielin\u0101t memeko\u012bna STONKS tirgus v\u0113rt\u012bbu l\u012bdz 85 miljoniem dol\u0101ru, pirms t\u0101 strauji nokrit\u0101s. T\u0101pat \u0161\u012b gada august\u0101 Lielbrit\u0101nijas kriptoval\u016btu platforma Lykke tika spiesta sl\u0113gt savu darb\u012bbu hakeru uzbrukumu d\u0113\u013c. Lai gan \u0161ajos gad\u012bjumos liel\u0101kajai da\u013cai kr\u0101pnieku neizdev\u0101s ieg\u016bt iev\u0113rojamas summas, \u0161\u0101di uzbrukumi nopietni grauj uztic\u012bbu soci\u0101lajiem t\u012bkliem k\u0101 sazi\u0146as kan\u0101lam.<\/p>\n
Soci\u0101lais faktors un dro\u0161\u012bbas ieteikumi<\/p>\n
\u0160is incidents v\u0113lreiz uzsver “soci\u0101l\u0101” vektora riskus: pat ofici\u0101li verific\u0113ti konti var k\u013c\u016bt par efekt\u012bvu l\u012bdzekli masveida kr\u0101p\u0161anai. Lai pasarg\u0101tu sevi, kriptoval\u016btu maku tur\u0113t\u0101jiem b\u016btu j\u0101iev\u0113ro vienk\u0101r\u0161i, bet kritiski svar\u012bgi dro\u0161\u012bbas pas\u0101kumi: nekad nepiesl\u0113gt savu maku caur aizdom\u012bgiem dom\u0113niem, r\u016bp\u012bgi p\u0101rbaud\u012bt URL, izmantot aparat\u016bras makus liel\u0101m summ\u0101m un nekav\u0113joties sazin\u0101ties ar projekta atbalsta dienestu, ja rodas aizdomas. Projekta komand\u0101m tiek ieteikts pastiprin\u0101t divu faktoru autentifik\u0101ciju (MFA) saviem soci\u0101lajiem kontiem, regul\u0101ri p\u0101rskat\u012bt tre\u0161o pu\u0161u lietojumprogrammu piek\u013cuves un sagatavot \u0101tras kontu izol\u0101cijas pl\u0101nus.<\/p>\n","protected":false},"excerpt":{"rendered":"BNB Chain X konts uzbrukuma m\u0113r\u0137is: hakeri izmantoja fikt\u012bvus saites Kiberdro\u0161\u012bbas pasaule satricin\u0101ta, jo ofici\u0101lais BNB Chain konts…\n","protected":false},"author":2,"featured_media":11333,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[77,3806,76,3809,3807,1064,35,39,38,36,37,34,40,3808],"class_list":{"0":"post-11332","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bizness","8":"tag-bizness","9":"tag-bnb-chain","10":"tag-business","11":"tag-finansu-krapsana","12":"tag-hakeru-uzbrukums","13":"tag-kiberdrosiba","14":"tag-latvia","15":"tag-latvian","16":"tag-latviesu","17":"tag-latviesu-valoda","18":"tag-latviesuvaloda","19":"tag-latvija","20":"tag-lv","21":"tag-x"},"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/11332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/comments?post=11332"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/11332\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media\/11333"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media?parent=11332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/categories?post=11332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/tags?post=11332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}