鏈上偵探 ZachXBT 將好萊塢 X 帳號駭客攻擊與被定罪的英國駭客 Gurvinder Bhangu 聯繫起來

鏈上偵探 ZachXBT 發現了兩名好萊塢名人的 X 帳戶被駭客入侵之間的聯繫，這些帳號被用來製造迷因幣騙局

Two recent high-profile X account hacks that saw the compromised accounts of actors used to advertise scam meme coins, generating over $530,000 in stolen funds, have been linked to Gurvinder Bhangu, a convicted U.K. hacker better known as Gurv.

最近發生的兩起備受矚目的X 帳號駭客攻擊事件，導致用於宣傳詐騙迷因代幣的參與者帳號被盜，產生了超過53 萬美元的被盜資金，這起事件與Gurvinder Bhangu 有關， Gurvinder Bhangu 是一位被定罪的英國駭客，俗稱Gurv。

On July 30, well-known anonymous crypto investigator ZachXBT shared his research into the hacks in an X thread.

7 月 30 日，知名匿名加密貨幣調查員 ZachXBT 在 X 線程中分享了他對駭客攻擊的研究。

The hacks saw the compromised X accounts of actors Sydney Sweeney and Bob Odenkirk used to promote scam meme coins in a bid to generate hype and inflate the price of the tokens before selling their large holdings.

駭客發現演員西德尼·斯威尼(Sydney Sweeney) 和鮑勃·奧登科克(Bob Odenkirk) 的X 帳戶被盜，他們用來推銷詐騙模因代幣，目的是在出售其持有的大量代幣之前進行炒作並提高代幣的價格。

According to ZachXBT’s investigation, on July 2, Sweeney’s X account was compromised and posts promoting a Solana-based token dubbed “$SWEENEY” began to appear from the actor’s hacked account. Within two hours, the scam token saw over $10 million in trading volume on the decentralized exchange (DEX) Serum, causing its price to spike and then crash.

根據 ZachXBT 的調查，7 月 2 日，Sweeney 的 X 帳戶遭到入侵，該演員被駭的帳戶中開始出現宣傳名為“$SWEENEY”的基於 Solana 的代幣的帖子。兩個小時內，詐騙代幣在去中心化交易所 (DEX) Serum 上的交易量超過 1000 萬美元，導致其價格飆升，然後暴跌。

2/ On July 2nd Sydney Sweeney was SIM swapped and a link to a meme coin was posted causing the price to spike and crash. Team wallets from the SWEENEY scam sold $515K+Main team walletsAgySZeAtqM3iSbvMPxv2g94oTd3segx4WdKuFD7M5CErjQEaiiAkRGhFoCDnjxn6mmtrksC4EckF38fxkaNMs1j pic.twitter.com/Vm0txgjl7B

2/ 7 月 2 日，Sydney Sweeney 被更換了 SIM 卡，並發布了一個 meme 硬幣的鏈接，導致價格飆升和崩潰。 SWEENEY 騙局的團隊錢包已售出 515,000 美元+主團隊錢包AgySZeAtqM3iSbvMPxv2g94oTd3segx4WdKuFD7M5CErjQEaiiAkRGhFoCDnjxn6mmtrksC4EckF38fxkadjkjkj851m/jckF38fxojckF38fxr.

The attack coincided with reports that Sweeney’s Verizon phone number was reportedly hijacked. 404 media obtained a Verizon receipt from the same day, indicating a $37.54 payment order, confirming that Sweeney was the victim of a sim-swapping attack.

這次襲擊恰逢斯威尼的 Verizon 電話號碼被劫持的報告。 404媒體當天獲得了一張Verizon收據，顯示一張37.54美元的付款單，證實斯威尼是SIM卡交換攻擊的受害者。

According to ZachXBT, Gurv — previously convicted in the U.K. for hacking Instagram accounts and blackmailing users — received verification codes for Sweeney’s account via Telegram, strengthening the link between Gurv and the hack.

根據 ZachXBT 報道，Gurv 先前因駭客 Instagram 帳戶和勒索用戶而在英國被定罪，透過 Telegram 收到了 Sweeney 帳戶的驗證碼，從而加強了 Gurv 與駭客之間的聯繫。

ZachXBT highlighted that the hacker used the same Telegram user ID to receive the code across multiple groups, discussing his time in prison and linking it to the hacks.

ZachXBT 強調，駭客使用相同的 Telegram 使用者 ID 在多個群組中接收代碼，討論了他在監獄中的經歷並將其與駭客行為聯繫起來。

The crypto investigator added that proceeds from the attack were initially transferred as Solana (SOL) to an exchange, where the funds were swapped for Bitcoin (BTC) and Ethereum (ETH) before being dispersed to several addresses. According to ZachXBT, the on-chain activity suggests that there were multiple people involved in the scam.

這位加密貨幣調查員補充說，攻擊所得的收益最初以Solana (SOL) 的形式轉移到交易所，在那裡資金被交換為比特幣(BTC) 和以太坊(ETH)，然後被分散到多個地址。據 ZachXBT 稱，鏈上活動表明有多人參與了該騙局。

The investigation revealed that on July 9, another 1.5 ETH as sent to an exchange from a wallet connected to the Sweeney SIM swap.

調查顯示，7 月 9 日，又有 1.5 ETH 從連接到 Sweeney SIM 交換的錢包發送到了交易所。

Odenkirk also hacked

奧登科克也被駭了

The investigator linked the Sweeney hack to another extremely similar attack on actor Bob Odenkirk’s X account, also on July 9. After compromising Odenkirk’s X account, the hacker(s) launched and posted about two scam meme coins, KIRK and SAUL. Possibly because the two coins diverterted attention, this time the scammers ended up stealing fewer funds.

調查人員將Sweeney 駭客攻擊與7 月9 日對演員鮑勃·奧登科克(Bob Odenkirk) 的X 帳戶進行的另一次極其相似的攻擊聯繫起來。發布了兩個騙局模因幣KIRK 和SAUL。可能是因為這兩枚硬幣轉移了注意力，這次騙子最終竊取的資金減少了。

At the time of ZachXBT’s reporting, the wallets connected to both the Sweeney and Odenkirk scams are holding approximately $488,000. The remaining funds “have been transferred to crypto casinos and to purchase gift cards.” ZachXBT concluded the X thread with a call to local law enforcement:

截至 ZachXBT 報告時，與 Sweeney 和 Odenkirk 騙局有關的錢包持有約 488,000 美元。剩餘的資金“已轉移到加密貨幣賭場並用於購買禮品卡。” ZachXBT 透過向當地執法部門發出呼籲來結束 X 主題：

“Hopefully UK law enforcement will be quick to go after Gurv again using the large amount of evidence available.”

“希望英國執法部門能夠利用現有的大量證據，迅速再次追捕 Gurv。”

The Sweeney and Odenkirck scams are part of a broader trend of celebrities promoting scam meme coins, either via compromised accounts or, in some cases, alleged social engineering scams.

斯威尼和奧登基克騙局是名人推廣騙局模因硬幣的更廣泛趨勢的一部分，這些騙局要么通過被盜帳戶，要么在某些情況下通過所謂的社會工程騙局。