\u201eColdcard\u201c aparatin\u0117ms bitkoino pinigin\u0117ms smog\u0119s \u012fsilau\u017e\u0117lis perved\u0117 apie 45 proc. l\u0117\u0161\u0173, pavogt\u0173 per vadinam\u0105j\u0105 tre\u010di\u0105 atak\u0173 bang\u0105, skelbia \u201eGalaxy Research\u201c. Tyr\u0117j\u0173 vertinimu, taip siekiama pasl\u0117pti grobio kilm\u0119 ir apsunkinti jo atsekim\u0105.<\/p>\n
\u201eGalaxy\u201c duomenimis, iki \u0161iol jau \u201ei\u0161leista\u201c 97,09 bitkoino. Tai rei\u0161kia, kad dalis pavogt\u0173 aktyv\u0173 jau buvo perkelta per kelias operacijas ir tik\u0117tina prad\u0117ta plauti, o likusi dalis dar laikoma \u012fsilau\u017e\u0117lio kontroliuojamuose adresuose.<\/p>\n
Analitikai atkreipia d\u0117mes\u012f, kad l\u0117\u0161os judinamos pagal dyd\u012f: pirmiausia perkeliami did\u017eiausi \u201eseifai\u201c, o ma\u017eesni adresai paliekami v\u0117lesniam etapui. \u201eGalaxy\u201c nurodo, kad jau pajudintos did\u017eiausios pozicijos, o dalis dar nepaliest\u0173 adres\u0173 vis dar saugo de\u0161imtis bitkoin\u0173.<\/p>\n
Pasak \u201eGalaxy\u201c, ankstesniu etapu \u012fsilau\u017e\u0117lis dal\u012f bitkoin\u0173 buvo konvertav\u0119s \u012f eter\u012f per \u201eTHORChain\u201c \u2013 tai viena i\u0161 kry\u017emini\u0173 grandini\u0173 infrastrukt\u016br\u0173, leid\u017eian\u010di\u0173 keisti skirting\u0173 blok\u0173 grandini\u0173 kriptovaliutas. V\u0117liau, naujausiu jud\u0117jimu, dalis l\u0117\u0161\u0173 buvo perleista per \u201eCoinJoin\u201c tipo operacijas, kurios sumai\u0161o keli\u0173 naudotoj\u0173 \u012fna\u0161us ir apsunkina konkre\u010di\u0173 monet\u0173 kilm\u0117s sekim\u0105.<\/p>\n
Tyr\u0117j\u0173 vertinimu, apie 82 proc. vis\u0173 i\u0161 \u201eColdcard\u201c naudotoj\u0173 i\u0161viliot\u0173 l\u0117\u0161\u0173 vis dar yra pradiniuose, \u012fsilau\u017e\u0117lio valdomuose adresuose. Likusi dalis, sprend\u017eiant i\u0161 grandin\u0117s duomen\u0173, jau panaudota maskavimo ir plovimo veiksmams.<\/p>\n
Atak\u0173 grandin\u0117, kaip nurodo \u201eGalaxy\u201c, siejama su programin\u0117s \u012frangos klaida, kuri buvo \u012fdiegta dar 2021 metais. Ji paveik\u0117 tai, kaip \u201eColdcard\u201c \u012frenginiai generavo pinigin\u0117s s\u0117kl\u0105, suma\u017eindama atsitiktinum\u0105, reikaling\u0105 saugiam rakt\u0173 suk\u016brimui.<\/p>\n
Praktin\u0117 pasekm\u0117 \u2013 daliai vieno para\u0161o adres\u0173 tapo \u012fmanoma \u201ebrute force\u201c metodu atsp\u0117ti s\u0117klos fraz\u0119 ir i\u0161tu\u0161tinti s\u0105skaitas fizi\u0161kai nepalie\u010diant \u012frenginio. Tai vienas pavojingiausi\u0173 scenarij\u0173 aparatini\u0173 pinigini\u0173 naudotojams, nes pavogti galima nuotoliniu b\u016bdu.<\/p>\n
\u201eGalaxy\u201c anks\u010diau skelb\u0117 identifikavusi ma\u017edaug 1 779 bitkoino vagyst\u0119 i\u0161 190 auk\u0173 ir daugiau nei 8 600 adres\u0173. Naujausiu atnaujinimu tyr\u0117jai mini papildom\u0105, anks\u010diau nepasteb\u0117t\u0105 adres\u0173 rinkin\u012f, kuris gali reik\u0161ti, kad bendras nuostoli\u0173 skai\u010dius dar i\u0161augo.<\/p>\n
Ekspertai pabr\u0117\u017eia, kad tokiais atvejais kriti\u0161kai svarbu nedelsti: jei pinigin\u0117s generavimo procesas buvo pa\u017eeid\u017eiamas, vien programin\u0117s \u012frangos atnaujinimas gali b\u016bti nepakankamas, o saugiausia i\u0161eitis \u2013 perkelti l\u0117\u0161as \u012f naujai sugeneruotas pinigines su patikrintu atsitiktinumu ir, jei \u012fmanoma, naudoti keli\u0173 para\u0161\u0173 sprendimus.<\/p>\n","protected":false},"excerpt":{"rendered":"
\u201eGalaxy Research\u201c skelbia, kad \u201eColdcard\u201c \u012fsilau\u017e\u0117lis jau pajudino 45 proc. tre\u010dios bangos grobio ir naudoja \u201eCoinJoin\u201c p\u0117dsakams sl\u0117pti.<\/p>\n","protected":false},"author":0,"featured_media":52454,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[94],"tags":[115,40589,40587,40588,114,12832,40590],"miestas":[],"class_list":["post-52453","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finansai","tag-bitcoin","tag-coinjoin","tag-coldcard","tag-galaxy-research","tag-kriptovaliutos","tag-kriptovaliutu-saugumas","tag-thorchain"],"acf":[],"_links":{"self":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts\/52453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/comments?post=52453"}],"version-history":[{"count":0,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts\/52453\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/media\/52454"}],"wp:attachment":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/media?parent=52453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/categories?post=52453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/tags?post=52453"},{"taxonomy":"miestas","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/miestas?post=52453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}