安全公司：当心针对苹果Mac用户的恶意软件Cthulhu Stealer，其目标为加密钱包
2024-08-26 04:01:08
苹果Mac用户近日收到了关于名为“Cthulhu Stealer”的新型恶意软件的警告，这种恶意软件可以窃取用户的个人信息，并以加密钱包为目标。
数日前，网络安全公司Cado Security表示：“多年来，人们普遍认为 macOS 系统对恶意软件免疫。虽然MacOS以安全著称，但相关恶意软件近年来呈上升趋势。”
据悉，“Cthulhu Stealer”以苹果磁盘映像（DMG）的形式出现，并伪装成CleanMyMac和Adobe GenP等合法软件。当用户打开该文件时，用于运行AppleScript和JavaScript的macOS命令行工具会提示用户输入密码。
一旦输入，将出现第二个提示，输入以太坊钱包MetaMask的密码。其还针对其他流行的加密钱包，包括来自Coinbase、Wasabi、Electrum、Atomic、币安和 Blockchain Wallet 的钱包。
该恶意软件将窃取的数据存储在文本文件中，然后对受害者的系统进行指纹识别，以收集IP地址和操作系统版本等数据。
“Cthulhu Stealer的主要功能是从包括游戏账户在内的各种商店窃取凭证和加密货币钱包，”Cado研究员Tara Gould解释说。然而，据称该恶意软件背后的诈骗者已不再活跃。
数日前，网络安全公司Cado Security表示：“多年来，人们普遍认为 macOS 系统对恶意软件免疫。虽然MacOS以安全著称，但相关恶意软件近年来呈上升趋势。”
据悉，“Cthulhu Stealer”以苹果磁盘映像（DMG）的形式出现，并伪装成CleanMyMac和Adobe GenP等合法软件。当用户打开该文件时，用于运行AppleScript和JavaScript的macOS命令行工具会提示用户输入密码。
一旦输入，将出现第二个提示，输入以太坊钱包MetaMask的密码。其还针对其他流行的加密钱包，包括来自Coinbase、Wasabi、Electrum、Atomic、币安和 Blockchain Wallet 的钱包。
该恶意软件将窃取的数据存储在文本文件中，然后对受害者的系统进行指纹识别，以收集IP地址和操作系统版本等数据。
“Cthulhu Stealer的主要功能是从包括游戏账户在内的各种商店窃取凭证和加密货币钱包，”Cado研究员Tara Gould解释说。然而，据称该恶意软件背后的诈骗者已不再活跃。
Previous article：
8月26日午间重要动态一览Next article：
List of important developments at noon on August 267x24 Newsflash
05:32 2025-03-26
The Federal Reserve's voting committee warns that rising inflation expectations will stand in the way of "interest rate cuts"Signs that investors in the US bond market are beginning to anticipate higher inflation would be a "significant red flag" that could derail rate-setters' plans to cut rates, the chairperson of the Chicago Fed and a member of the FOMC has warned.
Goolsby's comments come a week after a closely watched University of Michigan poll found that American households'...
05:29 2025-03-26
ETF experts comment on the end of the Ripple case: approval of the XRP ETF is only a matter of timeOn March 26th, Nate Geraci, president of The ETF Store, said on the social platform that the end of the Ripple case means that the approval of the spot XRP ETF is obviously only a matter of time. BlackRock, Fidelity and others are expected to participate.
XRP is currently the third largest non-stablecoin crypto asset by market cap. The largest ETF issuers will not ignore this.
Previously, Ripple agreed to waive the cross appeal, and the SEC will keep 50 million of the $125 million fine.
05:26 2025-03-26
Custodia partners with Vantage Bank to launch "first bank-issued stablecoin"Custodia Bank has partnered with Vantage Bank to complete what the two companies call "the first bank-issued stablecoin in the US" on a permissionless blockchain.
Custodia said on March 25 that it has tokenized US dollar demand deposits and facilitated the issuance, transfer and exchange of the stablecoin "Avit" on Ethereum through the ERC-20 token standard.
Mr. Castodia added: "New dollar payment channels have now been launched within the US banking system."
Catelyn Long, CEO of Custodia...
05:14 2025-03-26
Federal Reserve Goolsby: Due to economic uncertainty, the next rate cut may take longer than expectedAccording to the Financial Times: Federal Reserve Goolsbee warned that the next rate cut could take longer than expected due to economic uncertainty, saying he believes borrowing costs will be "significantly lower" over the next 12 to 18 months and that the Fed will need to act if investor expectations start to converge with those of U.S. households. (Jin Ten)
05:08 2025-03-26
Market News: Fidelity Plans to Launch StablecoinAccording to market news, Fidelity plans to launch a stablecoin to promote and support the development of the digital asset industry. The details have not been disclosed yet.
04:41 2025-03-26
Celo developers complete Ethereum Layer 2 conversion nearly two years after initial proposalCelo developers completed the Ethereum Layer 2 conversion nearly two years after the original proposal, which was originally a separate Layer 1 blockchain and has completed its conversion to the Ethereum Layer 2 network.
The official switch on the mainnet took place at around 11pm EST on Tuesday, with the hard fork occurring at block height 31,056,500. Block production for Celo L1 stopped at that point, and the network fully transitioned to Layer 2. The project's core developer, CLabs, first pro...
04:29 2025-03-26
ZKsync: There will be a v26 upgrade, during which Elastic Network deposits and withdrawals will not be completedAs part of the v26 upgrade, ZKsync funds will be transferred from the old bridge to the new gateway contract.
This upgrade is expected to take place on March 27 or March 31 (specific dates and times will be updated later).
In addition, during the upgrade period, deposits and withdrawals from Elastic Network will not be completed for up to three hours.
04:29 2025-03-26
Curve founder suspected to sell 1 million CRV again, cash 515,000 dollarsAccording to Spot On Chain, Curve Finance founder Michael Egorov appears to be selling CRV tokens again. Data shows that 18 hours ago, Egorov transferred 1.997 million CRV tokens to the wallet address "0x5a8", worth about 1.03 million dollars. Subsequently, the wallet sold 1 million CRVs at an average price of 0.515 dollars, earning 515,058USDC. The wallet still holds 997,000 CRV tokens, worth about 514,000 dollars.
04:19 2025-03-26
CZ: Achieving long-term growth and wealth requires understanding, belief, and patienceCZ said on its social platform that most people don't see the obvious future. Many people are also impatient. Tech trends in 10 years are easier to see than future prices. With a little understanding, faith and patience, there are many opportunities for long-term growth and wealth.
04:16 2025-03-26
GoPlus: The first batch of token repurchases has been executed, and about 34,906,177 GPS have been accumulated so far.GoPlus has released a token repurchase update, revealing that it has executed the first batch of GPS token repurchases. To date, approximately 34,906,177 GPS tokens have been accumulated. The repurchase process is underway, and all purchased tokens will be burned together after the repurchase is completed.
04:13 2025-03-26
GPS Repo Address Withdraws First Repo Token from Binance, Worth $1.12 millionAccording to @ai_9684xtpa monitoring, the GPS repurchase address proposed the first repurchase token from Binance, a total of 24.90 million tokens, worth 1.12 million dollars.
So far, the progress of GPS repurchase has been updated to 25.8%, or the price of GPS has risen by 3.4% in a short time due to the impact of repurchase.
04:07 2025-03-26
Golden Noon News | List of important events at noon on March 267:00-12:00 Keywords: Tokenized Treasury, DeepSeek, SEC
1. The market value of tokenized U.S. Treasury bonds exceeded 5 billion dollars for the first time;
2. Trump responded to the "group chat door": very satisfied with the handling result;
3. DeepSeek V3 launched the 0324 version upgrade, which greatly improved the inference performance;
4. Today, Bitcoin's market share was reported at 61.45%, which has been at a high level for more than a month.
The number of cryptocurrency ATMs worldwide has ...
Hot News
Vitalik: "DAO" means "project", "official" means "scam"Backpack Exchange已面向英国用户开放其服务派盾：NIBI同名代币发生Rug Pull，损失约31.39万美元香港金管局推出稳定币发行人沙盒CIAN与Lido合作，在Base上推出wstETH Hyper-Staking VaultGate.io 3月储备金总额突破60亿美元，额外储备金超8亿美元Polyhedra Network已于3月12日16时完成ZK空投快照英FCA：不会反对加密资产相关ETN上市请求BTC流通市值突破1.4万亿美元，续创新高Space Nation将于3月底启动OIK代币空投
Sociality
