Dro\u0161\u012bbas plaisa Trust Wallet p\u0101rl\u016bka papla\u0161in\u0101jum\u0101 izrais\u012bjusi masveida z\u0101dz\u012bbas<\/p>\n
Klienti, kuri izmanto kriptoval\u016btu maks\u0101jumu pakalpojumu Trust Wallet, piedz\u012bvoju\u0161i iev\u0113rojamus zaud\u0113jumus kiberuzbrukuma rezult\u0101t\u0101. Aizdom\u0101s par dro\u0161\u012bbas plaisu vien\u0101 no jaun\u0101kajiem atjaunin\u0101jumiem, kop\u0113j\u0101 aplauc\u0113t\u0101 summa sasniegusi aptuveni 7 miljonus ASV dol\u0101ru, skarot simtiem lietot\u0101ju kontu.<\/p>\n
Probl\u0113mas s\u0101ku\u0161\u0101s p\u0113c konkr\u0113tas Trust Wallet p\u0101rl\u016bka papla\u0161in\u0101juma versijas instal\u0113\u0161anas priek\u0161 Google Chrome. Pirmie sign\u0101li par incidentu par\u0101d\u012bj\u0101s p\u0113c daudzu lietot\u0101ju s\u016bdz\u012bb\u0101m par l\u012bdzek\u013cu t\u016bl\u012bt\u0113ju pazu\u0161anu p\u0113c pieteik\u0161an\u0101s vai seed fr\u0101zes (s\u0113klas fr\u0101zes) importa. P\u0101rskait\u012bjumi notiku\u0161i uz nezin\u0101miem \u013caundaru adres\u0113m.<\/p>\n
Blockchain dro\u0161\u012bbas anal\u012bti\u0137is ZachXBT nor\u0101d\u012bjis, ka naudas iz\u0146em\u0161ana notikusi gandr\u012bz vienlaic\u012bgi un sakritusi ar nesen veikto papla\u0161in\u0101juma atjaunin\u0101\u0161anu. Tas rad\u012bjis aizdomas par kompromit\u0113tu laidienu vai pieg\u0101des \u0137\u0113des uzbrukumu (supply-chain attack), kas izplat\u012bjies p\u0113c 24. decembra atjaunin\u0101juma. Uz zi\u0146ojuma public\u0113\u0161anas br\u012bdi prec\u012bzs uzbrukuma meh\u0101nisms v\u0113l nebija piln\u012bb\u0101 noskaidrots.<\/p>\n
Trust Wallet apstiprina incidentu un sniedz ieteikumus lietot\u0101jiem<\/p>\n
Komp\u0101nija Trust Wallet ir apstiprin\u0101jusi notiku\u0161o incidentu, nor\u0101dot, ka dro\u0161\u012bbas plaisa sk\u0101rusi tikai un vien\u012bgi p\u0101rl\u016bka papla\u0161in\u0101juma versiju 2.68. Uz\u0146\u0113mums stingri rekomend\u0113 lietot\u0101jiem nekav\u0113joties atsl\u0113gt min\u0113to versiju un atjaunin\u0101t to uz versiju 2.69, izmantojot ofici\u0101lo Chrome Web Store. <\/p>\n
Trust Wallet komanda uzsv\u0113rusi, ka mobil\u0101 lietotne palikusi dro\u0161a un citas p\u0101rl\u016bka papla\u0161in\u0101jumu versijas nav tiku\u0161as kompromit\u0113tas. Lietot\u0101jiem, kuri v\u0113l nav pasp\u0113ju\u0161i veikt atjaunin\u0101\u0161anu, ieteikts pagaid\u0101m neatv\u0113rt papla\u0161in\u0101jumu, lai izvair\u012btos no turpm\u0101kiem zaud\u0113jumiem.<\/p>\n
Binance l\u012bdzdibin\u0101t\u0101js sola kompens\u0113t zaud\u0113jumus<\/p>\n
Trust Wallet \u012bpa\u0161nieks un Binance l\u012bdzdibin\u0101t\u0101js \u010canpens \u010cao (Changpeng Zhao) ir apstiprin\u0101jis kiberuzbrukuma faktu un sol\u012bjis, ka komp\u0101nija piln\u012bb\u0101 kompens\u0113s visus zaud\u0113jumus cietu\u0161ajiem lietot\u0101jiem. P\u0113c vi\u0146a teikt\u0101, kop\u0113jais zaud\u0113jumu apjoms ir aptuveni 7 miljoni ASV dol\u0101ru, bet p\u0101r\u0113jie lietot\u0101ju l\u012bdzek\u013ci joproj\u0101m ir dro\u0161\u012bb\u0101. <\/p>\n
Trust Wallet komanda turpina iek\u0161\u0113jo izmekl\u0113\u0161anu, lai noskaidrotu, k\u0101 \u013caundariem izdev\u0101s izplat\u012bt problem\u0101tisko papla\u0161in\u0101juma versiju. <\/p>\n
Liel\u0101ks kiberuzbrukumu apjoms kriptoval\u016btu nozar\u0113<\/p>\n
\u0160is incidents notiek uz pla\u0161\u0101ka kiberuzbrukumu un pik\u0161\u0137er\u0113\u0161anas (phishing) uzbrukumu pieauguma fona kriptoval\u016btu sektor\u0101. Saska\u0146\u0101 ar komp\u0101nijas CertiK datiem, no gada s\u0101kuma l\u012bdz decembra s\u0101kumam kop\u0113jie zaud\u0113jumi no kiberuzbrukumiem nozar\u0113 sasniedza gandr\u012bz 3,4 miljardus ASV dol\u0101ru, kas p\u0101rsniedz iepriek\u0161\u0113j\u0101 gada r\u0101d\u012bt\u0101jus. <\/p>\n
Iepriek\u0161 tika zi\u0146ots ar\u012b par gad\u012bjumu, kad viens lietot\u0101js zaud\u0113ja 50 miljonus ASV dol\u0101ru, p\u0101rskaitot l\u012bdzek\u013cus uz viltotu adresi. Gad\u012bjums ar Trust Wallet ir k\u0101rt\u0113jais apliecin\u0101jums riskiem, kas saist\u012bti ar infrastrukt\u016bras kriptoaktu\u0101lu atjaunin\u0101jumiem, pat no lieliem un paz\u012bstamiem tirgus dal\u012bbniekiem.<\/p>\n","protected":false},"excerpt":{"rendered":"Dro\u0161\u012bbas plaisa Trust Wallet p\u0101rl\u016bka papla\u0161in\u0101jum\u0101 izrais\u012bjusi masveida z\u0101dz\u012bbas Klienti, kuri izmanto kriptoval\u016btu maks\u0101jumu pakalpojumu Trust Wallet, piedz\u012bvoju\u0161i…\n","protected":false},"author":2,"featured_media":88367,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[6612,77,76,22478,428,11701,35,39,38,36,37,34,40,14479],"class_list":{"0":"post-88366","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bizness","8":"tag-binance","9":"tag-bizness","10":"tag-business","11":"tag-drosibas-plaisa","12":"tag-kiberuzbrukums","13":"tag-kriptovalutu-zadziba","14":"tag-latvia","15":"tag-latvian","16":"tag-latviesu","17":"tag-latviesu-valoda","18":"tag-latviesuvaloda","19":"tag-latvija","20":"tag-lv","21":"tag-trust-wallet"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@lv\/115801998277989217","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/88366","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/comments?post=88366"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/88366\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media\/88367"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media?parent=88366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/categories?post=88366"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/tags?post=88366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}