慢霧：TRAE惡意Solidity擴展利用鏈上合約動態管理C2配置
火星財經消息，7 月 20 日，據安全機構慢霧，惡意 TRAE IDE 擴展 juannegro.solidity 偽裝成 Solidity 插件，並作為跨平臺惡意軟件投遞器。該擴展會在 IDE 啟動後自動執行並建立持久化，還使用以太坊智能合約存儲和獲取動態 C2 配置，使攻擊者無需重新發布擴展即可更新 C2 端點和載荷。該擴展雖已從 Open VSX 移除，但截至 7 月 18 日仍可通過 TRAE marketplace 獲取，已安裝用戶應立即刪除並檢查系統是否受損。
更多内容点击查看詳情
Source: Followin
Disclaimer: The current content is sourced from third-party perspectives or directly translated by AI from third-party perspectives. CoinEx does not guarantee the authenticity, accuracy, and originality of the content, and it does not constitute any investment advice from CoinEx. The prices of cryptocurrencies are highly volatile, please be aware of the potential risks.
Hot
- CoinsPrice24H Change