一个黑客偷取1000万美元的以太坊（无人知晓）

　　自去年12月以来，黑客一直在针对加密货币OG用户进行攻击，从他们的钱包中窃取资金，这让专家感到困惑。

Experts have been puzzled by the fact that hackers have been attacking OG users of encrypted currency and stealing money from their wallets since last December.

　　一起针对高级加密货币用户的1000万美元黑客攻击，让顶尖安全专家感到困惑。

A $10 million hacker attack against senior encrypted currency users puzzled top security experts.

　　以太坊钱包管理公司MyCrypto的前首席执行官和创始人Taylor Monahan周二在推特上说，自去年12月以来，超过5000个ETH被盗。

Taylor Monahan, former CEO and founder of MyCrypto's wallet management company, tweeted on Tuesday that more than 5,000 ETHs had been stolen since December last year.

　　按照今天的价格计算，这相当于超过1040万美元的加密货币。

At today's prices, this is equivalent to over $10.4 million in encrypted currency.

　　令人担忧的是：据Monahan说，它击中了那些优先考虑安全的用户的硬件钱包。

It is worrying that, according to Monahan, it hit the wallet of those users who gave priority to safety.

　　Monahan写道：“在过去的48个小时里，我一直在解除一个大规模的钱包转账行动”(她在MyCrypto去年被加密货币钱包的母公司ConsenSys收购后加入MetaMask)。她在推特上写道：“受害者是那些比大多数人更注重安全的加密货币OG”。

Monahan wrote: “In the last 48 hours, I've been dismantling a large-scale wallet transfer operation” (she joined MetaMask after MyCrypto was acquired last year by Consen Sys, the parent company of encrypted money wallets). She wrote on Twitter: “The victims are those who focus more on secure encrypted money OG than most people.”

　　换句话说，这些被盗的不是加密货币新手点击明显的网络钓鱼链接。攻击比那更复杂，而且是OG(原始玩家)遭到了“rekt”的攻击，Monahan解释说：“没有人知道它是怎么实现的”。

In other words, these were not the stolen currency recruits who clicked on the obvious web-fishing link. The attack was more complex than that, and the OG (the original player) was attacked by “rekt”, and Monahan explained: “No one knows how it was done”.

　　流行的加密货币钱包MetaMask背后的安全团队告诉媒体：“不明漏洞 ”击中了加密货币用户，包括但不限于MetaMask用户。

The security team behind the popular encrypted currency wallet MetaMask told the media that “unknown leaks” hit encrypted money users, including, but not limited to, MetaMask users.

　　他们说：“链上行为在很大程度上表明私钥被破坏了”。

They said that “acts on the chain are largely indicative of the destruction of private keys”.

　　目前的调查显示，似乎这个特定的攻击载体指向这些用户的秘钥(恢复短语在某处被泄露)，可能是由于这些OG无意中不安全地存储了上述短语。

The current investigation shows that it appears that this particular attack vehicle points to the key of these users (the restoration phrase was leaked somewhere), probably because the aforementioned phrases were inadvertently stored unsafely by the OG.

　　私钥被加密货币用户用于访问存储在数字或物理钱包中的资金并授权交易。

Private keys are used by encrypted currency users to access funds stored in digital or physical wallets and to authorize transactions.

　　Monahan还说，这次攻击的目标是2014-2022年创建的钱包中的资金。Monahan在推特上说：“我现在最好的猜测是，某人已经得到了1年或更长时间以前的一大批数据，并正在系统地从这些宝藏中解析密钥并将其耗尽。”她强调说，然而，这只是一个猜测，目前还没有人能够“确定他们被攻击来源”。

Monahan also stated that the target of the attack was the money in the wallet created in 2014-2022. Monahan on Twitter said: “My best guess now is that someone has received a large amount of data a year or more ago and is systematically dissecting and depleting the keys from these treasures.” She stressed, however, that this was only a guess, and that no one has yet been able to “identify their origin”.

　　她最好的建议是：“请不要将您所有的资产放在一个密钥或秘密短语中多年”。

Her best suggestion is: “Please do not place all your assets in a key or a secret phrase for many years”.

　　MetaMask的安全团队补充说，为了保护资金，用户不应将其私钥存储在任何在线或“联网设备”上。

The security team in MetaMask added that, in order to protect funds, users should not store their private keys on any online or “networking device”.

　　他们补充说：如果你的钱包已经老到记不清是否一直都100%保管它的私钥，那么考虑创建一个新的钱包吧”。

They added that if your wallet is too old to remember whether it has been kept 100 per cent of its private keys, then consider creating a new wallet”.

注册有任何问题请添加 微信：MVIP619 拉你进入群

文章转载注明 网址：https://netpsp.com/?id=69116