Thorchain Deepfake騙局：當加密貨幣創始人成為目標時

Thorchain聯合創始人在一個精緻的Deepfake騙局中損失了135萬美元。了解攻擊，朝鮮聯繫以及如何保護自己。

THORChain Deepfake Scam: When Crypto Founders Become the Target

Thorchain Deepfake騙局：當加密貨幣創始人成為目標時

In the ever-evolving world of crypto, even the most seasoned veterans aren't immune to sophisticated scams. The recent $1.35 million theft from a THORChain co-founder, orchestrated through a deepfake attack, serves as a stark reminder of this reality.

在不斷發展的加密世界中，即使是經驗豐富的退伍軍人也無法免疫複雜的騙局。最近，通過索什（Thorchain）聯合創始人盜竊了135萬美元的盜竊案，通過深層攻擊進行了精心策劃，這引起了這一現實的明顯提醒。

The Anatomy of the Attack

攻擊的解剖結構

The attack began with a compromised Telegram account. The victim, John-Paul Thorbjornsen, was lured into a fake Zoom meeting. This wasn't just any scam; it involved deepfake technology to impersonate someone he knew. Once the attackers gained access, they exploited vulnerabilities in his iCloud Keychain and browser profile to extract private keys tied to an old, forgotten MetaMask wallet. The result? A devastating $1.35 million loss.

攻擊始於受損的電報帳戶。受害人約翰·鮑爾·索布約恩森（John-Paul Thorbjornsen）被引誘參加假縮放會議。這不僅僅是任何騙局；它涉及DeepFake技術，以模仿他認識的人。一旦攻擊者獲得訪問權限，他們就會在其iCloud鑰匙扣和瀏覽器配置文件中利用漏洞，以提取與舊的，被遺忘的元掩蔽錢包有關的私鑰。結果？毀滅性的135萬美元虧損。

North Korean Connection?

朝鮮聯繫？

Blockchain investigators have pointed fingers at North Korean actors, citing patterns and prior behavior. While attribution in such cases is complex and requires time to confirm, the possibility adds another layer of concern to this already alarming incident. Ironically, THORChain products had been previously used by North Korean groups to launder stolen funds.

區塊鏈的調查人員以手指指著朝鮮演員，並以模式和先前的行為為由。雖然在這種情況下的歸因很複雜，並且需要時間來確認，但可能性增加了這一令人震驚的事件的另一層關注。具有諷刺意味的是，北朝鮮集團以前曾使用過胸腔產品來洗錢。

A Wake-Up Call for Security

警惕安全要求

This incident isn't isolated. It's part of a growing trend of deepfake and Zoom scams targeting crypto users. Security researchers warn that criminals are increasingly combining social engineering with AI tools to create incredibly convincing scams. Storing private keys in software that syncs to cloud services creates vulnerabilities. Threshold signature wallets, splitting key shares across multiple devices, may be the best defense against such advanced attacks.

此事件並非孤立。這是針對加密用戶的DeepFake和變焦騙局不斷增長的趨勢的一部分。安全研究人員警告說，犯罪分子越來越多地將社會工程與AI工具相結合，以創造令人信服的騙局。將私鑰存儲在與雲服務同步的軟件中會產生漏洞。閾值簽名錢包，跨多個設備的鑰匙股分開，可能是針對此類高級攻擊的最佳防禦。

THORSwap's Response: A Bounty for the Hacker

Thorswap的回應：黑客的賞金

In a rather unusual move, THORSwap offered a public bounty to the hacker, promising no legal action if the funds were returned within 72 hours. This approach, while surprising, reflects a growing trend in the crypto community: prioritizing recovery over revenge.

在一個相當不尋常的舉動中，Thorswap向黑客提供了公開賞金，承諾如果在72小時內退還資金，則無法律行動。這種方法令人驚訝地反映了加密社區的增長趨勢：優先考慮恢復而不是報仇。

The Broader Implications

更廣泛的含義

This incident underscores the fragility of trust in the crypto sector. As scammers adapt to advanced tools like deepfakes and supply chain exploits, individual investors and major companies face growing pressure to adapt. The recent Ledger CTO warning after the NPM attack further highlights the risks facing cryptocurrency users: direct scams that exploit human error and technical attacks that compromise widely used development tools.

這一事件強調了加密部門信任的脆弱性。隨著騙子適應高級工具和供應鏈的利用，個人投資者和主要公司面臨著越來越多的適應壓力。 NPM攻擊後最近的Ledger CTO警告進一步突出了加密貨幣用戶面臨的風險：直接騙局，這些騙局利用了人為錯誤和技術攻擊，這些騙局損害了廣泛使用的開發工具。

So, What Can You Do?

那麼，你能做什麼？

The lesson here is clear: vigilance is non-negotiable. Diversify protective measures by adopting hardware wallets, verifying transaction details, and regularly auditing the applications you rely upon.

這裡的教訓很明顯：警惕性是不可談判的。通過採用硬件錢包，驗證交易詳細信息並定期審核您所依賴的應用程序來多樣化保護措施。

While all of this might sound like a scene from a dystopian thriller, remember that knowledge is power. Stay informed, stay vigilant, and maybe think twice before clicking that Zoom link. After all, in the wild west of crypto, a little bit of paranoia can go a long way.

儘管所有這些聽起來都像是反烏托邦驚悚片的場景，但請記住，知識就是力量。保持告密性，保持警惕，然後在單擊該縮放鏈接之前三思而後行。畢竟，在加密貨幣的野外，一點偏執狂可能會走很長一段路。