Wallet-Transaction-Monitor

钱包交易监控器 该脚本监控一个比特币钱包地址，并在余额变动或产生新交易时通知用户。它实时提供转入和转出交易的更新，以及相应的金额和时间戳。此外，在Windows系统上发生新交易时，它还能播放声音通知。 更新日志 - 2023-07-10 增加了监控多个比特币钱包并自定义名称的功能 增加了将信息保存到文本文件的选项 未来几周内将推出更多功能 必要条件 Python 3.x requests 库：可通过运行 pip install requests 安装。 winsound 模块：Windows 系统默认自带该模块。 运行方法 确保系统已安装 Python 3.x。 pip install ...

IoC_Attack_ESXi_Feb_2023

IoCAttackESXiFeb2023 Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023. News Here are some references regarding the attack: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/...

Scalar-Venom-Attack

本文分析了现代加密密钥管理基础设施中发现的加密漏洞，特别关注硬件安全模块（HSM）在处理椭圆曲线私钥时架构中的关键缺陷。研究聚焦于一类利用认证加密设备中隔离不充分的RAM管理的攻击。在现代比特币加密生态系统中，私钥安全是保护全球价值数万亿美元数字资产的基本要求。经FIPS 140-2标准认证的硬件安全模块（HSM）传统上被认为通过硬件级隔离和严格的内存管理协议为加密密钥提供无法穿透的保护。然而，F5OS-A FIPS HSM模块中关键漏洞CVE-2025-60013 的发现，结合Scalar Venom Attack 类攻击（也称为Scalar Poison、Memory Phantom...

Phoenix-Rowhammer-Attack-CVE-2025-6202

本文探讨了 Phoenix Rowhammer 攻击（CVE-2025-6202）所带来的系统性密码学安全威胁，该攻击可通过硬件层面的位操作从 DDR5 内存中提取私钥。近年来，加密货币技术的动态发展导致数字资产生态系统对存储和处理密码学数据的硬件及微芯片组件的依赖日益加深。在此背景下，可能导致加密货币钱包私钥被直接攻破的硬件级漏洞正成为日益增长的风险因素。当今最危险的威胁之一便是针对内存的攻击，尤其是利用 DRAM 单元物理特性的高级 Rowhammer 漏洞变体。这些攻击使攻击者能够修改单个数据位，并获取机密信息，包括比特币和以太坊钱包的私钥。...

Feb2023-CVE-2021-21974-OSINT

Feb2023-CVE-2021-21974-OSINT 对Shodan结果和 Censys中的赎金需求分析 对于Shodan： 我提供了一个脚本，您可以将其作为自己分析的基础，或在Shodan抓取结果时更新并收集更多数据。我还包含了一个Python脚本，可用于查询blockstream.info API中任何带有相关交易的钱包地址。 在本文发布时，已有超过500个结果。这些结果可以在提供的CSV文件中找到，其中列出了赎金金额、比特币钱包和TOX ID。 对于Censys： 我使用Censys...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

CVE-2013-7372

The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNGSecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture JCA in Android before 4.4 and...

EUVD-2018-2038

Malware in sbrugna...

EUVD-2018-1785

Malware in sbrugna...

MultiBit HD Security Vulnerability

MultiBit HD is a bitcoin wallet open-sourced by MultiBit. A security vulnerability exists in versions prior to MultiBit HD 0.1.2 that stems from not setting the Message Authentication Code MAC...

Faux ‘DarkSide’ Gang Takes Aim at Global Energy, Food Sectors

Several organizations in the oil, gas and food sectors have received threatening emails from cybercriminals posing as DarkSide – the ransomware gang behind the Colonial Pipeline hack. According to researchers at Trend Micro, threat actors are taking advantage of the notoriety around the pipeline...

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized

Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. All the dark web sites...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-15130 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-15130 Source advisory: OSV:GHSA-CC2P-4JHR-XHHX...

Several High-Profile Accounts Hacked in the Biggest Twitter Hack of All Time

Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history. A number of high-profile Twitter accounts, including those of US presidential candidate Joe Biden, Amazon CEO Jeff Bezos, Bill Gates, Elon Musk, Uber, and Apple...

Twitter Confirms it was Hacked in an Unprecedented Cryptocurrency Scam

Twitter locked down thousands of verified accounts belonging to elite Twitter users and high-profile companies Wednesday afternoon in an effort to prevent hackers from perpetrating a massive cryptocurrency scam. The accounts fell victim to a compromise of the company’s internal systems by a group...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

Rapidly Growing Electrum Botnet Infects Over 152,000 Users; Steals $4.6 Million

An ongoing attack against Electrum Bitcoin wallets has just grown bigger and stronger with attackers now targeting the whole infrastructure of the exchange with a botnet of over 152,000 infected users, raising the amount of stolen users' funds to USD 4.6 million. Electrum has been facing cyber...

Electrum DDoS botnet reaches 152,000 infected hosts

By Jérôme Segura, Adam Thomas, and S!Ri We have been closely monitoring the situation involving the continued attacks against users of the popular Electrum Bitcoin wallet. Initially, victims were being tricked to download a fraudulent update that stole their cryptocurrencies. Later on, the threat...

TAU Threat Intelligence Notification – Fake Movie File Attack Targeting Cryptocurrency

A malicious Windows shortcut file is posing as a movie available on a torrent site - its payload is used to conduct web-injection, ultimately targeting victim’s web searches in browsers like Chrome, Firefox and Internet Explorer. The payload has the ability to search for and steal cryptocurrency...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...