【朝鲜黑客利用虚假招聘测试针对加密货币开发者】金色财经报道,某朝鲜黑客组织正在通过虚假招聘测试针对加密货币开发者。黑客在领英上伪装成招聘人员,向开发者发送包含恶意代码的编程测试题,一旦打开文件将安装窃取软件,从而危及受害者系统安全。 据安全公司 Cyvers 高级安全运营中心负责人 Hakan Unal 表示,黑客主要意图窃取开发者凭证和访问代码,包括云配置、SSH 密钥、系统元数据和钱包访问权限等。该攻击由朝鲜黑客组织 Slow Pisces(又称 Jade Sleet)实施。安全专家建议开发者对"条件过于优越"的未经请求的工作机会保持警惕。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.