Bitcoinleef - 萨尔瓦多声称网络犯罪分子于 2024 年 4 月 23 日泄露了比特币钱包代码

CiberInteligenciaSV 的黑客发布了萨尔瓦多 Chivo 比特币钱包的源代码，使最初泄露 510 万萨尔瓦多人个人数据的漏洞升级。尽管事件严重，但萨尔瓦多政府尚未正式处理此事，让公众陷入困境。

Cybercriminals Exploit Chivo Breach, Releasing Wallet Source Code and VPN Credentials

网络犯罪分子利用 Chivo 漏洞泄露钱包源代码和 VPN 凭证

In a deepening crisis, hackers have escalated their disclosure of sensitive information pertaining to Chivo, El Salvador's state-operated Bitcoin wallet.

在日益加深的危机中，黑客加大了对萨尔瓦多国营比特币钱包 Chivo 相关敏感信息的披露力度。

Source Code Distribution

源代码分发

On April 23rd, the CiberInteligenciaSV hacker collective published portions of Chivo's source code on BreachForums, a notorious online haven for cybercriminals.

4 月 23 日，CiberInteligenciaSV 黑客团体在 BreachForums（一个臭名昭著的网络犯罪分子天堂）上发布了 Chivo 的部分源代码。

"We now offer the code found within the Bitcoin Chivo Wallet ATMs in El Salvador. Remember, this is a government wallet. As always, we offer everything for free," the hacking group proclaimed.

“我们现在提供在萨尔瓦多的比特币 Chivo 钱包 ATM 机中找到的代码。记住，这是一个政府钱包。一如既往，我们免费提供一切，”该黑客组织宣称。

This disclosure follows the initial leak of Chivo's user database in early April, which compromised the personal information of 5.1 million Salvadorans, nearly the entire adult population.

此次披露是在 4 月初 Chivo 用户数据库首次泄露之后进行的，该数据库泄露了 510 万萨尔瓦多人的个人信息，几乎涵盖了所有成年人口。

Consequences of the Breach

违规的后果

The source code release has heightened concerns about Chivo's security. Experts warn that having access to the source code allows cybercriminals to identify vulnerabilities and exploit the wallet.

源代码的发布加剧了人们对 Chivo 安全性的担忧。专家警告说，访问源代码可以让网络犯罪分子识别漏洞并利用钱包。

Security researchers at VenariX had previously alerted the public to the imminent release of the source code through a Telegram message from CiberInteligenciaSV.

VenariX 的安全研究人员此前曾通过 CiberInteligenciaSV 的 Telegram 消息提醒公众即将发布源代码。

"If any curious government officials wish to communicate, we will publish a portion of the source code and VPN access associated with Chivo Wallet tonight, for free as always," the message stated.

消息称：“如果任何好奇的政府官员希望进行交流，我们将一如既往地免费发布今晚与 Chivo 钱包相关的部分源代码和 VPN 访问权限。”

Additionally, the hacking group provided a compressed file containing compiled code and VPN credentials from the Chivo Wallet ATM network.

此外，黑客组织还提供了一个压缩文件，其中包含来自 Chivo Wallet ATM 网络的编译代码和 VPN 凭证。

El Salvador's Response

萨尔瓦多的回应

El Salvador's government promoted Chivo as the official Bitcoin wallet for citizens after the country became the first globally to adopt Bitcoin as legal tender in September 2021. Chivo allows users to store and withdraw Bitcoin from ATMs, buy and trade Bitcoin, and access other financial services.

萨尔瓦多于 2021 年 9 月成为全球第一个采用比特币作为法定货币的国家后，该国政府将 Chivo 推广为公民的官方比特币钱包。Chivo 允许用户从 ATM 存储和提取比特币、购买和交易比特币以及访问其他金融服务。

Despite the reported flaws and technical issues that plagued Chivo's launch, the Salvadoran government has yet to adequately address the ongoing data breach.

尽管据报道存在缺陷和技术问题困扰着 Chivo 的推出，但萨尔瓦多政府尚未充分解决持续存在的数据泄露问题。

Official Silence

官方沉默

Salvadoran authorities have not issued an official statement regarding the incident, contributing to the heightened uncertainty surrounding the situation.

萨尔瓦多当局尚未就该事件发表正式声明，加剧了局势的不确定性。

Experts emphasize the importance of swift government action to mitigate the impact of the breach and restore public confidence in Chivo.

专家强调政府必须迅速采取行动，以减轻此次泄露的影响并恢复公众对 Chivo 的信心。

Unresolved Issues

尚未解决的问题

The data breach has raised concerns about the government's handling of sensitive personal information and the potential misuse of this data. The lack of transparency and accountability from Salvadoran authorities has further eroded trust in the government's ability to protect citizen data.

此次数据泄露引发了人们对政府处理敏感个人信息以及这些数据可能被滥用的担忧。萨尔瓦多当局缺乏透明度和问责制，进一步削弱了人们对政府保护公民数据能力的信任。

Impact on Bitcoin Adoption

对比特币采用的影响

The security breach associated with Chivo has cast a shadow over El Salvador's ambitious Bitcoin adoption plans. Experts believe that the lack of robust security measures and the government's delayed response may deter potential Bitcoin users and damage the reputation of cryptocurrency as a whole.

与 Chivo 相关的安全漏洞给萨尔瓦多雄心勃勃的比特币采用计划蒙上了阴影。专家认为，缺乏强有力的安全措施和政府的延迟反应可能会阻止潜在的比特币用户，并损害整个加密货币的声誉。

As the situation continues to unfold, it remains unclear what long-term consequences the Chivo breach will have on El Salvador's Bitcoin experiment.

随着事态的继续发展，目前尚不清楚 Chivo 漏洞将对萨尔瓦多的比特币实验产生什么长期影响。