Kero Inouraya uye Clipboard Hijacker Malware: Kumisa Yakashandurwa Crypto uye Wire Transfers¶

Kuziva nguva mushure mekudzvanya "Send" pane cryptocurrency transfer kana waya yebhangi kuti kero yekuenda pascreen kwete chikwama kana IBAN yawaida kubhadhara, kunyangwe mavara mana kusvika matanhatu ekutanga uye ekupedzisira 4 kusvika 6 mavara ekero akafanana (0x71C9...89A4), zvinoreva kuti warohwa ne On-Chain Vanity Kero Inouraya Poisoning Attack kana Clipboard Hijacker ("Clipper") Malware. Kusiyana a cryptocurrency wallet drain kana mbeu-mutsara wekukanganisa apo anorwisa anoba 12-izwi rekudzoreredza mutsara wako, kana kero chepfu kana clipper malware inoda kuti anorwisa azive makiyi ako ega. Pane kudaro, kurwiswa kwese kunoshandisa tsika yemunhu yekukopa nekunamira tambo refu (42-character Ethereum/EVM addresses, 34-to-62-character Bitcoin/Solana/Tron addresses, kana 15-to-34-character international IBAN bank account numbers) uye kungotarisa mavara mana ekutanga uye ekupedzisira mana nemaziso. Kana iyo kero yakashandurwa ikaonekwa mukati mebrowser yako kana desktop iyo chaiyo millisecond yawakadzvanya Ctrl+V (Cmd+V), komputa yako kana foni ine inoshanda clipboard-yekutarisa trojan kana rogue browser yekuwedzera; bvunza mutungamiri wedu pa yakashata browser ekuwedzera, clipboard hijackers, uye adware kubviswa. Kana iyo yakashandurwa kuchinjirwa yaive waya yekumba kana yepasi rose (SWIFT / SEPA / Fedwire / Faster Payments), pakarepo ita matanho ekurangarira mukati corporate bhizinesi email compromise (BEC) uye waya yekubiridzira kuyeuka. Kana wakatarisana nekubirwa kana kutyisidzirwa kuhupenyu, fonera nhamba yako ye emergency (911 muUnited States neCanada, 112 muEuropean Union, 999 muUnited Kingdom) kana tarisa dhairekitori redu repasi rese nhamba dze emergency.

Ita izvi ikozvino¶

1. Mumasekonzi gumi, mhanyisa "Notepad Copy-Paste Test" kuti uone kana komputa/foni yako ine utachiona hweClipper Malware KANA kana wakopa netsaona Kero Yehupfu kubva munhoroondo yako yekutengeserana:
2. Vhura iyo plain text editor (Notepad, TextEdit, kana kero yebrowser yako), nyora kana kukopa kero chaiyo yechikwama (0x71C95911E9a5D330f4D621842EC243EE1343292e), wobva wadzvanya Ctrl+V (Cmd+V)
3. ** Mhedzisiro A (Tambo yakanamirwa inochinja pakati Ctrl+C uye Ctrl+V): Chishandiso chako chabatwa neClipboard Hijacker ("Clipper") Malware** (inove yeWindows/macOS yekumashure inotepfenyurwa kana yakashata Chrome/Brave/Edge browser yekuwedzera) inobata system yekushandisa clipboard API (AddClipboardFormatListener / NSPasteboard) uye inochinjana chero tambo inoenderana ne regex yeBitcoin, Ethereum, Solana, Tron (USDT), kana IBAN ine kero yemunhu arikurova pasi pe5 milliseconds. Bvisa komputa iyi kubva painternet nekukasika uye usasainire mamwe matransaction pairi.
4. ** Mhedzisiro B (Iyo tambo yakanamirwa HAIshanduke kana iwe uchikopa kero chaiyo, nekuti wakatora netsaona kero isiriyo kubva pachikwama chako che "Recent Transactions" runyorwa kana Etherscan/Tronscan)**: Wakarohwa ne Pa-Chain Vanity Kero Poisoning Scam, apo bhoti yakatarisa yako yeruzhinji blockchain kero "ichigadzira kero yakavharika" uye yakagadzira kero yakavharwa neiyo vhezheni. mavara seanogashira anogamuchira, uye akatumira a $0.00 (kana $0.00001 dust) transaction kuchikwama chako kuitira kuti kero yavo yakaita seyakafanana igare pamusoro pechikwama chako chekutengesa nhoroondo yakamirira kuti iwe uikope. Komputa yako nemakiyi akavanzika HAZVISINA kubirwa; Chirevo chembeu chewallet yako chichiri chakachengeteka.
5. ** Kana yako cryptocurrency transaction ichiri "Pending" mune mempool (Unconfirmed), kutepfenyura Replace-By-Fee (RBF) / Same-Nonce Cancellation Transaction pakarepo **:
6. PaEthereum, Arbitrum, Optimism, Polygon, Base, kana BSC (MetaMask, Rabby, Ledger Live, Coinbase Wallet): Kana kutengeserana kusati kwaiswa mubhuroka, ipapo tinya "Kanzura" kana kugonesa Custom Nonce muzvirongwa zvewallet yako uye tumira 0 ETH kune kero yako yechikwama uchishandisa iyo chaiyo Nonce nhamba ** ine ** 50% yepamusoro Yekukosha Gasi Mari (Max Priority Fee) kunyora pasi kutengeserana kwechepfu pamberi pevagadziri vazvisimbisa.
7. PaBitcoin (Electrum, Sparrow, BlueWallet, Ledger): Tinya-kurudyi pane kutengeserana kusina kusimbiswa wosarudza Kanzura (Double-Spend with RBF) kana Kubhadharira-Mubereki-Mwana (CPFP) kudzosera mari kukero yako yekuchinja ine yakakwira sat/vB mubhadharo.
8. Kana watumira USDT (Tether) kana USDC (Denderedzwa) kune kero ine chepfu kana clipper-yakabiwa, faira pakarepo Emergency Issuer Freeze Chikumbiro (Blacklist / Freeze):
9. Kusiyana neBitcoin yekuzvarwa kana ETH, zvibvumirano zvakangwara zve USDT (Tether) paEthereum, Tron (TRC-20), Solana, and Avalanche and USDC (Circle) vane yakavakirwa-mukati manejimendi addBlackList() / blacklist() basa rinogona kuomesa zvidhori zvakabiwa mukati mehomwe yemunhu anorwisa asati avhara mabhiriji kana kuaburitsa kuburikidza nekuchinjana.
10. Sevha ipapo Transaction Hash (TxID), iyo Attacker's Kero Yekuenda, uye Kero Yekutumira yako, isa online report ne FBI IC3 (ic3.gov) kana mapurisa epanzvimbo yepa cyber, endesa chiitiko pa ** Chainabuse (chainabuse.com), uye tumira tikiti rekumisa ku Tether (tether.to/en/contact-us -> Zvemutemo / Kusimbisa Mutemo Kusunungura Chikumbiro) ** kana ** Denderedzwa (circle.com)** uchitsvaga mari paEtherscan/Tronscan/Arkham kunyevera chero shanduko yepakati (Binance, Coinbase, Kraken, OKX, Bybit, HTX) pakarepo munhu anorwisa anoisa mari yacho.
11. ** Kana iyo yakashandurwa kuchinjirwa yaive Bank Wire (IBAN / SWIFT / ACH / Faster Payments yakashandurwa nebhangi clipper malware), fonera bhanga rako Wire Fraud Recall Desk mukati mekutanga makumi matatu maminetsi**:
12. Kumbira nekukurumidza SWIFT MT192 / MT199 (pacs.004) Kudzima & Kuyeuka Hutsotsi, kumbira bhangi rako kuti ritumire bhengi-ku-bhangi chiziviso chemuripo kudhipatimendi rekuteerera rebhangi, uye taura zvakachinjwa. IBAN.
13. ** Bvisa Clipper Malware kubva kubrowser yako uye sisitimu yekushandisa usati wakopa imwe tambo inonzwisisika **:
14. Vhura chrome://extensions (kana edge://extensions, brave://extensions, about:addons) uye bvisa yese isingazivikanwe yekuwedzera nekukasira.
15. PaWindows, vhura Task Manager / Microsoft Sysinternals Autoruns uye ongorora mabasa akarongwa, HKCU\Software\Microsoft\Windows\CurrentVersion\Run,uye %APPDATA% / %LOCALAPPDATA%\Temp kune hutsotsi hwekumashure hunoitwa hunoteerera kune clipboard.

Chisarudzo muti: Kero Poisoning vs. Clipper Malware kuongororwa uye mhinduro¶

Shandisa iyi flowchart kuona kuti ndeipi vector yekurwisa yakachinja kero yako uye ndezvipi zviito zvekukurumidza zvinogona kuchengetedza mari yako kana mudziyo:

flowchart TD
    Incident["Yakatumirwa (kana Inenge Yatotumirwa) Crypto kana Bhangi Kuendesa kune Yakashata Kutarisa Kero"] --> NotepadTest{"Mhanya iyo Notepad Muedzo: Kopa Kero Inozivikanwa-Yakanaka Wallet/IBAN uye Namira Iyo muNotepad (Ctrl+C -> Ctrl+V). Mashoko Akanamirwa Anochinja Here?"}

    NotepadTest -->|"EHE: Yakanamirwa Chinyorwa Swaps otomatiki muMiliseconds"| ClipperPath["VECTOR A: Active Clipboard Hijacker ('Clipper') Malware paPC yako, Mac, Runhare, kana Browser Extension."]

    NotepadTest -->|"HAPANA: Mavara Akamisikidzwa Anoramba Akafanana (Wakakopa Kero Yakafanana neYako Kubva Panhoroondo Yekutengeserana)"| PoisonPath["VECTOR B: Pa-Chain Vanity Kero Yehupfu Scam (Chishandiso Chako neMbeu mutsara HAZVINA KUTAPURWA)"]

    ClipperPath --> IsolateDevice["STEP 1A: Bvisa PC Yakatapukirwa / Foni kubva paInternet -> Ongorora chrome: // mawedzero & Matanho ekutanga -> Tarisa Kana Yakakura Infostealer Yakabawo Browser Cookies/Passwords."]

    PoisonPath --> TxStatus{"Wakatoshambadzira Transaction, uye Yakasimbiswa?"}
    IsolateDevice --> TxStatus

    TxStatus -->|"Haasati Atumirwa (Akabatwa Asati Asaina)"| SafeStop["Gadziridza Wallet Yako Kero Book / Whitelist ine Verified Yakazara 42-Char Kero uye Usambo Kopota kubva Transaction Nhoroondo"]

    TxStatus -->|"Yakamirira muMempool (Isina Kusimbiswa)"| RBF["URGENT: Broadcast Same-Nonce 0-ETH Self-Transfer (EVM) kana RBF Double-Spend (Bitcoin) ine 50% Yakakwira Gasi Muripo Kuti Ukanzure"]

    TxStatus -->|"Yakasimbiswa On-Chain kana Bank Wire Yatumirwa"| AssetCheck{"Ndeupi Rudzi RweAsset Yakatumirwa?"}

    AssetCheck -->|"USDT (Tether) kana USDC (Denderedzwa)"| FreezeToken["Faira Mapurisa/IC3 Chirevo + Tumira Nechimbichimbi Chiratidzo Bvunza/Kumisa Chikumbiro kuTether/Denderedzwa + Monitor Attacker Kero yeCEX Deposit"]
    AssetCheck -->|"Native BTC / ETH / SOL"| TraceCEX["Kutsvaga Mari kuburikidza neEtherscan/Arkham/MistTrack -> Tumira Mutemo Wekusimbisa Kusunungura Tiketi kune Destination Exchange (Binance, Coinbase, Kraken, OKX) Kana Yaiswa"]
    AssetCheck -->|"Bank Wire / SEPA IBAN / Inokurumidza Kubhadhara"| WireRecall["Fonera Kutumira Bhengi Wire Kubiridzira Desk Pakarepo kune SWIFT MT192 / SEPA Recall + Zivisa Kugamuchira Bank Kutevedza"]

Kurwisa kuviri kunoshanda sei: Vanity Kero Poisoning vs. Clipper Trojans¶

Kunyangwe kurwiswa kwese kuri kuita kuti mari yako iende kuchikwama cheanorwisa kana account yekubhangi, maitiro avo ehunyanzvi, uye zvavanoreva pakuchengetedza mudziyo wako, zvinopesana zvachose:

Chikamu Chekutanga: Zvekuita Kana Iwe Uchangobva Kutumira Mari kune Kero ine Chepfu kana Yakabiwa¶

Nguva inoyerwa mumaminetsi kana uchitsvaga pa-cheni kutamiswa kana kurangarira waya dzebhangi. Tevedza matanho aya nekukurumidza:

1. Kutsvaga & Kutonhora Kubiwa USDT (Tether) kana USDC (Denderedzwa) Pa-Chain¶

Nekuti pamusoro ** 75 muzana yezvese-ketani kero kurasikirwa kwechepfu kunoitika mukati USDT (paTron TRC-20 uye Ethereum ERC-20) uye USDC, vakakuvadzwa vane yakakosha kudzoreredza mukana weiyo Bitcoin uye yemuno ETH inoshaikwa: ** yepakati smart-contract kutonhora . 1. ** Vhura blockchain muongorori (etherscan.io, tronscan.org, solscan.io, arbiscan.io) uye unamate hashi yako yekutengeserana (TxID): - Dzvanya pa Attacker's Recipient Kero kuti uone kana yako yakabiwa USDT kana USDC ichiri kugara mukati mechikwama chavo kana kuti vakachifambisa kune chepakati "hop" chikwama. 2. Kana iyo USDT kana USDC achiri kugara muchikwama chekunze (EOA) paEthereum, Tron, Solana, Polygon, Arbitrum, Base, kana Avalanche: - Tete (USDT) uye Denderedzwa (USDC) vakaomesa mari inopfuura $1.8 bhiriyoni mumari dzakabiwa muzviuru zvekero nekudaidza smart contract's AddedBlackList shanda pakugamuchira vatevedzeri vemutemo kana mareport echitsotsi akasimbiswa. - Ipa pakarepo: 1. Chirevo chekukurumidzira ku FBI IC3 (ic3.gov), Action Fraud UK, Europol, kana hofisi yemapurisa epakombiyuta yako kuti uwane nhamba yereferensi. 2. Chirevo chehutsotsi hweveruzhinji pa Chainabuse (chainabuse.com) uye ** Etherscan / Tronscan "Chirevo / Mureza Kero" saka wallet kuchengetedza APIs (Blockaid, Blowfish, Wallet Guard, Rabby, MetaMask) pakarepo ratidza kero yeanorwisa mutsvuku kune vamwe vashandisi. 3. Tikiti rekumisa rekumisa ku Tether Support (tether.to/en/contact-us) ** uye ** MistTrack / SlowMist / Chisimbiso 911 (@Seal_911 paTeregiramu, iyo Web3 Security Alliance 24/7 emergency chiitiko mhinduro hotline) neyako TxID, chaiyo UTC timestamp, uye mapurisa/IC3 referensi. 3. ** Kana munhu anorwisa achifambisa crypto yakabiwa muCentralized Exchange (CEX) Deposit Kero (Binance, Coinbase, OKX, Kraken, Bybit, HTX, KuCoin, Gate.io)**: - Ziva iyo chaiyo Exchange Hot Wallet zita rakanyorwa paEtherscan/Tronscan/Arkham uye **chaiyo TxID yedhipoziti mukuchinjana ikoko **. - Chese chikuru chepakati chekuchinjana chine 24/7 Law Enforcement & Victim Asset Freeze Portal (Binance Law Enforcement Request / Customer Support Case, Coinbase Support, OKX Risk Control) Tumira iyo Deposit TxID kudhesiki retsigiro rekutsinhana ikoko nekukasira uye uvakumbire kuti vaise ** yenguva 7-yemazuva ekuteedzera kumisa pa sub-account yakagamuchira Deposit. TxID [Hash] nepo vemutemo vachitumira mutemo wefreeze order **.

2. Kurangarira Altered Bank Wire (IBAN / Account Number Yakachinjwa neClipper Malware)¶

Kana bank clipper trojan (ClipBanker, Qakbot, ZeuS/ZLoader) akachinjanisa wemutengesi kana wemuridzi wemba IBAN kana nhamba yenzira/akaundi pawakaiisa mune yako online banking portal: 1. Fonera bhangi rako ** Wire Fraud / Treasury Recall Desk ** mukati meawa yekutanga uye kumbira nekukurumidza ** Chitsotsi Wire Recall (SWIFT MT192 / SEPA SCT Recall / Faster Payments APP Fraud Claim). 2. Tarisa kumusoro Bank Identifier Code (BIC) / Nhamba Yekutenderera yakadzikwa mukati meanorwisa IBAN (mavara 5 kusvika ku8 echero European/UK IBAN zivisa bhengi chairo rinogamuchira) uye fonera iyo ** inogamuchira yebhangi Dhipatimendi reKubiridzira zvakananga ** kuzivisa iyo account [Attacker IBAN] iakaundi yemari-nyurusi inogamuchira mari yeclipboard malware yekubiridzira**.

Chikamu Chechipiri: Kutsvaga uye Kubvisa Clipboard Hijacker ("Clipper") Malware¶

Kana yako Notepad Copy-Paste Test yakaratidza kuti kukopa kero yecrypto kana IBAN nekuiisa nekukasira kunochinja mameseji (kana kana iwe uchifungidzira kuti PC yako, Mac, kana Android foni ine clipper iri kushanda), tevera iyi forensic yekubvisa kutevedzana usati washandisa chishandiso kune chero chiitiko chemari:

1. Tarisa Mawedzero ebrowser Kutanga (Iyo #1 Tsime reMuchinjikwa-Platform Clippers)¶

Varwi vemazuva ano vanowanzoviga clipboard-swapping JavaScript mukati inoratidzika kunge isina mhosva browser extensions (PDF converters, ad blockers, volume boosters, dark mode toggles, fake MetaMask/Phantom/Ledger helper extensions, kana ChatGPT sidebar tools) uchishandisa browser navigator.clipboard.writeText() kana document.execCommand('copy') Mapurogiramu 1. Vhura chrome://extensions (kana edge://extensions, brave://extensions, about:addons muFirefox). 2. ** VIMA kana Bvisa chese chekuwedzera chausingavimbe ne100% **, kana kuyedza kuisa mukati me Incognito / Yakavanzika Window (apo mawedzero akavharwa nekusarudzika). 3. Kana iyo clipboard swapping ikamira kana wangodzima imwe browser yekuwedzera, tinya **Report Abuse ** uye **Bvisa **, wotevera yedu yakazara browser yekuchenesa gwara: yakashata browser ekuwedzera, clipboard hijackers, uye adware kubviswa.

2. Kutsvaga & Kuuraya Native OS Clipper Trojans paWindows, macOS, uye Android.¶

Kana iyo clipboard ichiri kuchinjanisa kero yako yechikwama kunyangwe iwe uchikopa nekuisa mukati Notepad.exe kana TextEdit uine web browser yako yakavharwa zvachose, clipper iri kushanda senative operating system background process:

PaWindows 10/11:¶

1. ** Bvisa PC kubva paWi-Fi uye Ethernet nekukasira ** (mazhinji clippers anoda Laplas Clipper bvunza online C2 server pese paunokopa kero kuitira kuti vadzosere kero yakada kufanana nevasina maturo; kucheka kuwana internet kunomisa shanduko kana kuita kuti iyo malware idzokere kukero yakaoma, uye inodzivirira panguva imwe chete. infostealer malware kubva pakurodha mafaera ako).
2. Shandisa Process Explorer kana PowerShell kubata hutsinye hwakabata Clipboard Chain: Vhura iyo ** Administrator PowerShell** hwindo uye nyora ese asiri eMicrosoft anomhanya maitiro ekuita kunze kwemushandisi-anonyorwa madhairekitori (%APPDATA%, %LOCALAPPDATA%, %TEMP%, C:\ProgramData):

   Get-CimInstance Win32_Process | Where-Object { $_.ExecutablePath -match "AppData|Temp|ProgramData|Public" } | Select-Object ProcessId, Name, ExecutablePath, CommandLine | Format-Table -AutoSize
   

3. ** Ongorora Windows Kutanga Kushingirira (Scheduled Tasks uye Run Makiyi)**: 90 muzana yeWindows clippers inoenderera kuburikidza neyakavharika ** Yakarongwa Basa ** kana ** Registry Run kiyi ** inotangisa a .vbs, .bat, .ps1, kana .exe zvakavigwa mukati %APPDATA%:

   Get-ScheduledTask | Where-Object { $_.TaskPath -notmatch "\\Microsoft\\" -and $_.State -ne "Disabled" } | Select-Object TaskName, TaskPath, @{N="Actions";E={$_.Actions.Execute + " " + $_.Actions.Arguments}}
   

   Uye tarisa ikozvino mushandisi wekutanga registry kiyi:

   Get-ItemProperty "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run", "HKCU:\Software\Microsoft\Windows\CurrentVersion\RunOnce"
   

4. ** YAMBIRO INOKOSHA: Clippers anenge asingambofambi ega paWindows kana macOS **: Mumishandirapamwe yemazuva ano yecybercrime (Lumma Stealer, RedLine, Vidar, Stealc, Atomic macOS Stealer), **Clipper module ingori mubhadharo wekupedzisira unoramba uripo wasara SHURE mushure mekunge Infostealer yatobvisa password yese yakachengetwa, kuki yechikamu, uye software crypto-wallet vault (MetaMask Local Extension Settings .ldb mafaira, Electrum, Exodus, Atomic) kubva pakombiyuta yako **.
5. Kana iwe ukawana yemuno clipper malware paPC yako kana Mac, ** fungidzira yega yega software wallet (MetaMask, Phantom, Rabby, Trust, Exodus) uye yega yega-yakapinda-mubrowser chikamu pamushini iwoyo zvakare yakakanganiswa **.
6. Shandisa ** yakaparadzana, yakachena komputa kana foni ** kuendesa ese asara crypto kunze kwesoftware inopisa wallet mune nyowani ** Hardware Wallet (Ledger, Trezor, Keystone, Coldcard)** mutsara wembeu, bvisa ese anoshanda browser masesheni, uye ita yakachena OS reinstall.

Pane macOS:¶

1. Vhura ** Terminal ** uye tarisa asiri Apple LaunchAgents uye kumashure maitiro:

   ls -la "$HOME/Library/LaunchAgents" /Library/LaunchAgents /Library/LaunchDaemons
   

2. Ukaona wausingazive .plist faira kuvhura binary kubva /tmp/, /Users/Shared/, kana $HOME/Library/Application Support/, budunura nekuidzima, wobva watarisa neMalwarebytes yeMac kana Chinangwa-Ona KnockKnock.

Pa Android Smartphones:¶

• Android clippers dzinowanzoita sedzekunyepedzera-rakaremerwa .apk mapurogiramu (Fake Telegram, Fake WhatsApp, Fake Authenticator, kana mitambo yakatsemuka) yakapihwa Mvumo yeSevhisi (sezvo Android 10+ inorambidza kuseri kweclipboard kuverenga kunze kwekunge app iriyo yekuisa nzira yekuisa kiyibhodhi IME kana kuti inobata ino shanda Kuwanika pamusoro).
• Enda ku ** Zvirongwa > Kuwanika > Akaiswa maapuro ** uye ** Settings > System > Keyboard > On-screen keyboard ** uye uninstall chero isingazivikanwe app pakarepo.

Chikamu chechitatu: Dziviriro Yechigarire Kupokana Nedzose Kero Poisoning & Clipper Malware¶

Kana ukangotora maitiro mashanu aya ekushanda, kana 100,000 GPU vanity-address poisoning farm kana trojan inobira clipboard inogona kukunyengerera kuti utumire mari kunzvimbo isiri iyo zvakare:

• 1. Iyo "Yepakati-6 + Yekutanga-4 + Yekupedzisira-4" Inooneka Verification Rule:
• ** Usambofa wakaongorora mavara mana ekutanga uye ekupedzisira mana ekero yechikwama kana IBAN**.
• Nekuti kugadzira kero isina maturo inoenderana ne8 mavara ekunze (4 prefix + 4 suffix, ingangoita 4.29 bhiriyoni musanganiswa) inotora yemazuva ano sumbu reGPU isingasviki ** 2 masekonzi **, vanorwisa vanogona kugara vachienderana nemagumo ekero yako.
• Zvakadaro, kuenzanisa imwe ** mavara matanhatu pakati chaipo pekero** (zvingangoita makumi manomwe neshanu quadrillion musanganiswa) hazvigoneke pakuita zveopportunistic poisoning bots. Gara uchiongorora mabhii mana ekutanga, mavara matanhatu ari pakati chaipo, uye mavara mana ekupedzisira uchipikisana nekwakabva usati wasaina.
• 2. Usambokopa Kero kubva ku "Recent Transactions" Nhoroondo kana Etherscan/Tronscan Activity Tab:
• Bata chikwama chako che "Transaction History / Chiitiko" tebhu se ** isina kuvimbwa yeruzhinji graffiti** uko chero munhu paPasi anogona kubaya fake. $0.00 kutamiswa uye kero dzakafanana.
• Pane kudaro, chengetedza munhu wese anogashira, chikwama chekuchengetera chinotonhora, uye dhipoziti kero mukati mechikwama chako ** yakavakirwa-mukati Kero Book / Contacts Whitelist** ine mavara akajeka anoverengwa nevanhu ("My Coinbase USDC Deposit", "Hardware Ledger Vault #1") uye sarudza anogamuchira zvakananga kubva kuBhuku rako rekero rakachengetwa.
• 3. Chinja kune Chengetedzo-Yekutanga Wallets Iyo Inomira Otomatiki Chepfu & Yekutanga-Kero Kero (Rabby, MetaMask Blockaid, Phantom):
• Mazuvano Web3 wallets se** Rabby Wallet** uye MetaMask (ine Blockaid chenjedzo yekuchengetedza yakagoneswa) inokuyambira mutsvuku wakajeka usati wasaina kana:
  • Ndiyo ** nguva yekutanga ** yawakambotumira kukosha chaiko kune iyi chaiyo-mavara-42 kero ("Warning: First-time transfer to this address"), kubata kero ine chepfu ipapo nekuti iwe unofunga kuti uri kutumira kune kero yekare yaunozivikanwa asi chokwadi iwe usati wambotumira mari kune anorwisa anotaridzika kero kare.
  • Kero yekwaunoenda ine zvibodzwa zvakada kufanana (Levenshtein distance) kune imwe kero munhoroondo yako ("Address Poisoning Detected")
• 4. Gara Uchisimbisa Kero Yese Yekuenda paFisical Screen yeHardware Wallet (Ledger, Trezor, Keystone, Coldcard, GridPlus):
• Kunyangwe Clipper Malware paPC yako ine hutachiona ichichinjanisa kero pakombuta yako (kana kunyangwe kana malware yakakwira yakakochekera browser yako DOM kuratidza iyo chaiyo kero mukati meChrome uchipfuudza kero yeanorwisa kuchikumbiro chekusaina USB), *malware paPC yako haigone kuchinja zvinoratidzwa paEAL5+/EAL6+ Chengetedza Element chidzitiro chechikwama chako chemidziyo.
• Enzanisa kero inoratidzwa pane yako hardware wallet yemuviri OLED/touchscreen uchipesana ne ** yechipiri yakazvimirira mudziyo ** (semuenzaniso, kutarisa invoice yemugamuchiri kana QR kodhi pa smartphone yako uchisaina paPC hardware chikwama chako).
• **5. Tumira Diki Yekuyedza Transaction Chete Kana Iwe Ukadzokororazve Kubva kune Yekutanga Verified Source **:
• Cherekedza musungo wakajeka: Vazhinji vakabatwa ne Vanity Kero Poisoning vakangwarira zvekuti vakatumira $10 test transaction kutanga. Vachiri kurasikirwa nemadhora zviuru makumi mashanu pachiitiko chechipiri nekuti masekondi makumi matanhatu mushure mekutengesa kwavo kwemadhora gumi kwasimbiswa pa-cheni, bhoti yemunhu yakarova yakaisa chepfu nhoroondo yavo yekutengeserana nekero yakaita sekero, uye munhu akabatwa paakaenda kunotumira madhora zviuru makumi mashanu akasara, vakakopa "kero yandangotumira madhora gumi kune" kubva pane yavo Yazvino.
• Kana ukatumira bvunzo, chengetedza kero yakasimbiswa muBhuku Rekero * usati* watumira bvunzo, uye sarudza iyo chaiyo yekero Book kero pakutumira kukuru.

Nhamba dzenharaunda dzechimbichimbi uye zvirongwa zveagency¶

Kunyangwe mari yako yakatsauswa ne-on-chain vanity kero chepfu kana clipboard malware, kukurumidza kutaurira kune vemutemo uye blockchain ehungwaru madhesiki anodiwa kumanikidza kuchinjika kwepakati (CEXs) uye vanobudisa stablecoin (Tether / Circle) kuomesa uye kudzosera zvinhu zvakabiwa:

• United States neCanada:
• Emergency Services: Dial 911 kana paine kutyisidzira kwenyama.
• FBI Internet Crime Chichemo Center (IC3): Nyora iyo cryptocurrency pakarepo kana waya-hutsotsi shumo pa ic3.gov (yehumbavha hombe kana crypto mukati memaawa makumi manomwe nemaviri apfuura, maka chichemo che IC3 Recovery Asset Team RAT uye sanganisira iyo chaiyo TxID, blockchain network, tokeni kontrakiti, uye anorwisa chikwama kero).
• U.S. Secret Service (USSS) Cyber ​​Fraud Task Force & CISA: Bata yako USSS Field Hofisi yenzvimbo yako yekristpto/waya diversion kana shuma zviratidzo zvemalware ku cisa.gov/report.
• Canadian Anti-Fraud Center (CAFC): Taura pa antifraudcentre-centreantifraude.ca kana 1-888-495-8501 uye isa mushumo nemapurisa ekanzuru yako cybercrime unit.
• United Kingdom:
• Emergency Services: Dial 999 (kana 101 yemapurisa asiri e emergency).
• Kubiridzira kwekuita: Fonera 0300 123 2040 nekukasira (24/7 yehupenyu cyber / mhosva yezvemari iri kuenderera mberi) kana shuma ku actionfraud.police.uk. Nezvekufambiswa kwebhangi kwakachinjwa nemalware, bata bhangi rako nekukasika pasi peUK **Kukurumidza Kubhadhara Kwakabvumidzwa Push Payment (APP) Kubhadhara kwehutsotsi ** mitemo.
• European Union:
• Emergency Services: Dial 112 kumatunhu ese enhengo dzeEU.
• **Europol National Cybercrime Units **: Isa chirevo chemapurisa ipapo kuburikidza europol.europa.eu/report-a-crime/report-cybercrime-online (inodiwa naTether, Denderedzwa, uye kuchinjana kukuru pasi peEU MiCA / AML masisitimu ekuchengetedza asset chando kupfuura kwekutanga kwekukurumidza kubata).
• Australia neNew Zealand:
• Emergency Services: Dial 000 muAustralia kana 111 muNew Zealand.
• ** ReportCyber (ACSC Australia)**: Mharidzo ku cyber.gov.au/report-and-recover/report kana kufona 1300 CYBER1 (1300 292 371).
• CERT NZ (New Zealand): Chirevo pa cert.govt.nz.
• India neAsia-Pacific:
• India National Cyber Crime Helpline: Dial 1930 pakarepo kana taura ku cybercrime.gov.in.
• Mapurisa eSingapore (SPF) Anti-Scam Center & Hong Kong Police (ADCC): Call 1800-722-6688 (Singapore) kana 18222 (Anti-Deception Coordination Centre Hong Kong).

Mibvunzo inowanzo bvunzwa¶

Kana a $0.00 USDT kuchinjisa kwakaratidzwa muchikwama changu se "Kutumirwa KUBVA kukero yangu" kune imwe kero isingazivikanwe, zvinoreva here kuti mupambi ane mutsara wembeu yangu kana kiyi yakavanzika?¶

Kwete, chirevo chembeu yako uye makiyi akavanzika akachengeteka zvachose. In standard Ethereum (ERC-20), Tron (TRC-20), uye BNB Chain (BEP-20) chiratidzo zvibvumirano zvakangwara, iyo transferKubva(mutumi, mugamuchiri, mari) basa rinotarisa kana munhu akafona ane mvumo yekufamba mari zviratidzo panzvimbo yako (`allowance >= amount`) Nekuti yako default allowance kune wausingazive ndeye 0, uye mutorwa anopfuura mari = 0, kondirakiti yakangwara inotarisa kana 0 >= 0 (ndizvo Chokwadi) uye inobvumira chero munhu ari Panyika kuti abudise manyepo 0.00 USDT chiitiko chekufambisa newallet yako yakanyorwa semutumi, pasina kumbova nekiyi yako yakavanzika kana kubvumidzwa. Murwi aita izvi chete kudyara kero yavo yakafanana mukati mewallet yako "Recent Activity" list.

Ko mubiki akagadzira sei kero yewallet inotanga nemabhii mashanu chaiwo uye inopera nemabhii mashanu chaiwo akafanana nekero yangu chaiyo?¶

Cryptocurrency wallet kero masheshi eruzhinji anotorwa nemasvomhu kubva kune yakasarudzika kiyi yakavanzika. Kunyange zvisingaite kudzosera kumashure-injiniya kiyi yakavanzika yekero yako chaiyo 42-unhu, anorwisa achishandisa boka remakadhi emifananidzo yevatengi (`GPUs` kumhanya zvishandiso senge `profanity2` kana `vanity-eth`) inogona kugadzira mabhiriyoni emakiyi emakiyi pasekondi uye ingorasa chero kero isingaite kuti utange neako ekutanga mavara 4-5 uye woguma neako ekupedzisira mavara 4-5. Nekuti kuenzanisa 8 kusvika gumi hexadecimal mavara kunongoda kuyedza 4.3 bhiriyoni kusvika 1 thiriyoni hashes, yakawanda-GPU server inogona kugadzira inogutsa prefix-uye-suffix yakafanana kero mu. seconds, nepo mavara makumi matatu epakati achiramba asina kurongeka.

Clipper Malware inogona kushandura kero yeEthereum kana yeBitcoin SHURE ndatoisa pawebhu peji?¶

Yakajairika inoshanda-system clipper malware inongo gadzirisa zvinyorwa zvakagara mukati me system yako clipboard buffer pakati penguva yaunodzvanya. Ctrl+C uye nguva yaunodzvanya Ctrl+V. Nekudaro, kana iyo malware iri kushanda mukati mewebhu browser yako se yakashata Chrome/Edge/Firefox yekuwedzera, ine yakazara kuverenga-kunyora kuwana kune peji rewebhu's Document Object Model (DOM) uye unokwanisa kuchinjana chinyararire kero yekwaunoenda mukati meweb-based input box chaipo paunodzvanya bhatani rekuti "Submit". Ndosaka uchifanira kugara uchisimbisa kero yakazara pa chidzitiro chemuviri chechikwama chehardware usati wadzvanya bhatani rekusimbisa muviri.

Anoshandisa zita reENS (vitalik.eth) kana Solana .sol domain ndidzivirire kubva kune kero chepfu uye clipper malware?¶

Kushandisa mazita eENS anoverengwa nevanhu (`alice.eth`) inobatsira kudzivirira kukopa kero ine chepfu hexadecimal kubva munhoroondo yako yekutengeserana, chero ukanyora zita reENS zvakananga neruoko pane kurikopa nekunamira. Ngwarira misungo miviri yeENS: Chekutanga, vanorwisa vanonyoresa homograph / typo-squatted ENS madomasi vachishandisa isingaonekwi Unicode zero-width mavara kana Cyrillic akafanana mavara (`aIice.eth`) Chechipiri, nguva dzose simbisa kuti zvakagadziriswa 0x... hexadecimal kero inoratidzwa pane yako hardware wallet skrini inofanana nekero yechokwadi yemugamuchiri.

Kana ndakatumira mari netsaona kukero ine chepfu, ndingatumire meseji ye-on-chain kune hacker ndichipa 10% kana 20% "white-hat bounty" kuti ndidzosere zvimwe?¶

Ehe, kutumira pane-cheni UTF-8 meseji yakamisikidzwa mukati meiyo Input Data (Hex) chikamu chidiki chekutengeserana kune kero yeanorwisa (ichitaura zvakajeka kuti mutemo uye Tether / Circle / Exchange zvikumbiro zvekumisa zviri kuiswa, uye kupa yakachena 10% kusvika 20% bounty kana 80% kusvika 90% yemari yadzoserwa mukati maawa makumi maviri nemana) yakabudirira mune akati wandei-yepamusoro-profile kero-kunyanya kubatwa-chepfu. USDT kana USDC kuti anorwisa anoziva Tether kana Denderedzwa rave kuda kutema uye kuomesa zvachose mukati mechikwama chavo zvakadaro. Gara uchiisa chikumbiro chako chekumisikidza cheTether / Circle uye chirevo chemapurisa chakafanana pasina kunonoka.

Mazano anoenderana¶

• Yakashata browser ekuwedzera, clipboard hijackers, uye adware kubviswa
• Cryptocurrency wallet drain uye mbeu-mutsara wekukanganisa
• Corporate bhizinesi email compromise (BEC) uye waya yekubiridzira kuyeuka
• Session cookie kubiwa, infostealer malware, uye kubviswa kwepasskey
• Nguruve-butchering crypto investment scam uye romance DeFi recovery fraud
• Nhamba dzenjodzi nenyika

Nzvimbo uye nhungamiro yepamutemo¶

• Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) & U.S. Secret Service (USSS): Public Service Alerts pa Cryptocurrency Vanity Kero Poisoning (Zero-Value Token Transfer) Kurwiswa uye Clipboard Hijacker Malware.
• Cybersecurity uye Infrastructure Security Agency (CISA) & MITER ATT&CK Framework (Technique T1115: Clipboard Data): Kuonekwa uye Kuderedza Clipboard Monitoring uye Kutsiva Malware (ClipBanker, Laplas Clipper).
• SlowMist & Web3 Security Alliance (SEAL 911) Mishumo Yekutsvakurudza: * On-Chain Analysis yeERC-20 / TRC-20 transferFrom Zero-Kukosha Kero Chepfu, Diki-Chimwe Dust Poisoning, uye USDT/USDC Emergency Blacklist Procedus*.
• National Cyber ​​Security Center (NCSC) (United Kingdom) neEuropean Union Agency yeCybersecurity (ENISA): Kuchengetedza Digital Asset Transactions, Hardware Wallet Verification, uye Payment Redirection Fraud Defense.