美國加拿大協作業務塊損失430萬美元的以太坊錢包用戶的批准網絡釣魚攻擊

一項協作的美國加拿大業務封鎖了430萬美元對以太坊錢包用戶的批准網絡釣魚攻擊。美國特勤局和加拿大執法機構追踪並通知了受害者。

A joint U.S.-Canadian operation has reportedly blocked a $4.3 million approval phishing attack on Ethereum wallet users. The U.S. Secret Service and Canadian law enforcement agencies tracked down and notified the victims.

據報導，美國加拿大聯合的行動已封鎖了430萬美元對以太坊錢包使用者的批准網絡釣魚攻擊。美國特勤局和加拿大執法機構追踪並通知了受害者。

The authorities identified several blockchain addresses that were compromised or vulnerable to exploitation. Scammers use approval phishing to deceive users into authorizing token transfers, after which the fraudsters can access and drain the wallets.

當局確定了幾個被妥協或容易受到剝削的區塊鏈地址。騙子使用批准的網絡釣魚來欺騙用戶授權代幣轉移，然後欺詐者可以訪問和排空錢包。

These criminals often carry out these scams through social engineering methods, including the “pig butchering” romance scam. Once a victim approves a malicious transaction request, the attackers gain complete control of their assets.

這些罪犯經常通過社會工程學方法進行這些騙局，包括“豬屠殺”浪漫史騙局。一旦受害者批准了惡意交易請求，攻擊者就會完全控制其資產。

Operation Avalanche focused on fraudulent transactions on the Ethereum network. Investigators worked with blockchain analysts to identify the wallets affected in the phishing scheme. The team then contacted the wallet holders to warn them about the threat and protect their assets.

Avalanche行動集中在以太坊網絡上的欺詐交易上。研究人員與區塊鏈分析師合作，以確定網絡釣魚方案中影響的錢包。然後，團隊與錢包持有人聯繫，警告他們有關威脅並保護其資產的信息。

The operation involved multiple law enforcement agencies in Canada and the U.S. to halt the ongoing fraud. The B.C. Securities Commission and the U.S. Secret Service took the lead in this initiative. Additionally, provincial police forces and securities regulators contributed their expertise and resources to the operation.

該行動涉及加拿大和美國的多個執法機構，以阻止正在進行的欺詐行為。卑詩省證券委員會和美國特勤局領導了這項倡議。此外，省警察部隊和證券監管機構還為行動提供了專業知識和資源。

Analysts from the Washington Field Office of the Secret Service provided technical and forensic support for the investigation. The Canadian agencies collaborated with the Secret Service to identify the stolen funds and mitigate future threats. This cooperation helped in tracking the transactions and analyzing the scammers’ methods.

特勤局華盛頓現場辦公室的分析師為調查提供了技術和法醫支持。加拿大機構與特勤局合作，以確定被盜的資金並減輕未來的威脅。這種合作有助於跟踪交易並分析騙子的方法。

Officials mentioned that the hacked wallets had approved token transfers to malicious addresses through their token approval process, allowing the fraudsters to maintain control even without the victims transferring funds directly.

官員們提到，被黑客的錢包已通過其令牌批准程序批准了對惡意地址的代幣轉讓，即使沒有受害者直接轉移資金，欺詐者也能夠保持控制。

These scammers exploited the granted permissions to operate undetected and circumvent standard security alerts.

這些詐騙者利用了授予的許可，以操作未發現和規避標準安全警報的權限。

Chainalysis data shows that approval phishing has led to approximately $2.7 billion in cryptocurrency losses between 2021 and 2024. However, the actual total loss could be even higher as many cases go unreported. These scams are sophisticated and can affect individual users and decentralized organizations (DAOs).

鏈分析數據表明，批准網絡釣魚導致2021年至2024年之間的加密貨幣損失約為27億美元。但是，隨著許多案件未報告，實際的總損失可能更高。這些騙局很複雜，可能會影響個人用戶和分散組織（DAOS）。

The Ethereum network has seen significant losses due to approval phishing, with one notable instance being the $120 million attack on Badger DAO. The scammers often target wealthy NFT collectors and active crypto users.

以太坊網絡由於批准的網絡釣魚而造成了巨大損失，其中一個值得注意的例子是對Badger Dao的1.2億美元襲擊。騙子通常以富有的NFT收集者和活躍的加密使用者為目標。

Attackers capitalize on user trust and limited understanding of wallet permissions. In one case, an influencer fell victim to a romance scam over two years ago, leading to the loss of $2.6 million in cryptocurrencies.

攻擊者利用用戶信任和對錢包權限的有限理解。在一個案例中，有影響力的人在兩年前遭受了浪漫史的受害者，導致損失了260萬美元的加密貨幣。

The operation highlights the importance of international cooperation in disrupting transnational crypto fraud and cybercrime. The investigators worked with a blockchain analysis firm and a cryptocurrency exchange to monitor the suspicious wallet transactions. This initiative led to the dismantling of several criminal networks.

該行動強調了國際合作在破壞跨國加密欺詐和網絡犯罪方面的重要性。研究人員與區塊鏈分析公司和加密貨幣交換合作，以監視可疑的錢包交易。這項倡議導致拆除了幾個犯罪網絡。