網路釣魚：駭客變得更聰明

由於網路釣魚攻擊的不斷增加，10 月迄今已損失了 4,100 萬美元。加密空間內的大多數網路釣魚操作通常涉及讓用戶透過其加密錢包簽署操作，以批准合約或連結權限。

A whopping $41 million has been lost in October so far due to the increasing influx of phishing attacks. Most of the phishing operations within the crypto space usually involve engaging users in signing actions through their crypto wallets, to approve contracts or linking permissions.

由於網路釣魚攻擊的不斷增加，10 月迄今已損失了 4,100 萬美元。加密空間內的大多數網路釣魚操作通常涉及讓用戶透過其加密錢包簽署操作，以批准合約或連結權限。

Making false tokens that look like real wallet tokens is one typical phishing method used to pilfer cryptocurrencies from victims’ wallets. Particularly harmful is permit phishing since it lets several highly valuable tokens be transferred simultaneously.

製作看起來像真實錢包代幣的虛假代幣是一種典型的網路釣魚方法，用於從受害者的錢包中竊取加密貨幣。特別有害的是允許網路釣魚，因為它允許同時轉移多個高價值的代幣。

3 hours ago, another victim lost $1.57M after signing a “permit” phishing signature.

3小時前，另一名受害者在簽署「許可」網路釣魚簽名後損失了157萬美元。

Phishing: Hackers Getting Smarter

網路釣魚：駭客變得更聰明

An example is a wallet breach with $1.39 million worth of meme tokens. Although such ransom attacks are not new, they picked up the pace just in the last few days of October, which correlates with increased user activity.

一個例子是價值 139 萬美元的 Meme 代幣的錢包洩漏。儘管此類勒索攻擊並不新鮮，但在 10 月的最後幾天，其攻擊速度有所加快，這與用戶活動的增加有關。

25 mins ago, a PEPE holder lost $1.39M worth of PEPE, MSTR, and APU after signing a “permit2” phishing signature.

25 分鐘前，一名 PEPE 持有者在簽署「permit2」網路釣魚簽名後損失了價值 139 萬美元的 PEPE、MSTR 和 APU。

Most such attacks occur on the Ethereum blockchain, which is very liquid and uses well-known smart contracts. Most hackers use open-source contracts to devise malicious links or develop quite realistic-looking smart contracts for unsuspecting individuals to click.

大多數此類攻擊發生在以太坊區塊鏈上，該區塊鏈流動性非常好，並且使用眾所周知的智能合約。大多數駭客使用開源合約來設計惡意連結或開發看起來非常逼真的智能合約，供毫無戒心的個人點擊。

Hacked Social Media Accounts Spread Fake Links

被駭的社交媒體帳戶傳播虛假鏈接

Crypto has seen a lot of activity on X and similar platforms, which makes X user accounts now the biggest target for hackers. The issue is particularly high in October, as the meme token frenzy would overlap with a broader market recovery. Hacked X accounts, especially those of influencers or meme token projects, share links deceiving users into connecting their wallets.

Crypto 在 X 和類似平台上出現了大量活動，這使得 X 用戶帳戶現在成為駭客的最大目標。這個問題在 10 月尤其嚴重，因為 meme 代幣的狂熱將與更廣泛的市場復甦重疊。被駭的 X 帳戶，尤其是影響者或 meme 代幣項目的帳戶，會共享鏈接，欺騙用戶連接他們的錢包。

The link might empty the wallets, even from a simple “connect wallet” click. Some malicious links might be token recovery or anti-hack tools. Other fake links also resemble and mimic advertisements from search engines, such as Google, which ask people to connect their wallets to new blockchains. Therefore, all necessary testing for authenticity should be done with empty wallets.

即使點擊簡單的“連接錢包”，該連結也可能會清空錢包。一些惡意連結可能是令牌恢復或反駭客工具。其他虛假連結也類似於Google等搜尋引擎的廣告，要求人們將錢包連接到新的區塊鏈。因此，所有必要的真實性測試都應該在空錢包的情況下進行。

Exploits In Airdrop And Advertising

空投和廣告中的漏洞

Phishing schemes always employ interest in airdrops or point farming to raise the guard and obtain wallet permissions. Recently, hackers stole an X account associated with the SPX6900 meme token, which might have put the buyers at risk of malicious addresses.

網路釣魚騙局總是利用空投或積分挖礦的興趣來提高警覺並獲取錢包權限。最近，駭客竊取了與 SPX6900 meme 令牌相關的 X 帳戶，這可能使買家面臨惡意地址的風險。

Malicious links may appear like harmless offers or download links targeting people preparing their wallets for trading meme tokens but these events will become more prevalent as more users begin filling the meme token space.

惡意鏈接可能看起來像是無害的優惠或下載鏈接，目標是準備錢包進行Meme 代幣交易的人們，但隨著越來越多的用戶開始填充Meme 代幣空間，這些事件將變得更加普遍。

Social media scam ads, fake comments, botched Discord servers, and expired invitation links are additional risks. One attack can swallow your wallet, another might do a lot more damage that could be beyond your crypto wallet.

社群媒體詐騙廣告、虛假評論、損壞的 Discord 伺服器和過期的邀請連結都是額外的風險。一種攻擊可能會吞噬您的錢包，另一種攻擊可能會造成更大的損害，甚至超出您的加密錢包。