Trust Wallet 警告 Apple 用戶注意嚴重的 iMessage 零日漏洞

加密錢包提供商 Trust Wallet 敦促蘋果用戶停用 iMessage，因為潛在的零日漏洞可能會讓駭客控制 iPhone。據「可靠情報」稱，該漏洞可以在沒有用戶互動的情況下滲透 iPhone，針對高價值帳戶。這項警告引起了人們的擔憂，一些專家質疑證據的真實性，而另一些專家則強調採取預防措施的重要性。

Trust Wallet Warns Apple Users of Critical iMessage Zero-Day Exploit

Trust Wallet 警告 Apple 用戶注意嚴重的 iMessage 零日漏洞

In a concerning development, crypto wallet provider Trust Wallet has alerted Apple users to a potential zero-day exploit targeting the iMessage application on iPhones. This exploit, reportedly being sold on the Dark Web for millions of dollars, could allow hackers to gain unrestricted access to users' iPhones and compromise their valuable digital assets, including cryptocurrencies.

令人擔憂的是，加密錢包提供商 Trust Wallet 已提醒 Apple 用戶注意針對 iPhone 上的 iMessage 應用程式的潛在零時差攻擊。據報道，這項漏洞在暗網上以數百萬美元的價格出售，駭客可以不受限制地存取用戶的 iPhone，並損害他們寶貴的數位資產，包括加密貨幣。

Zero-day exploits, also known as "day zero" or "0-day" exploits, refer to vulnerabilities in software, hardware, or firmware that are unknown or have not yet been addressed by the vendor. These vulnerabilities provide attackers with an advantage by allowing them to exploit systems before security patches can be implemented.

零日漏洞利用，也稱為「零日」或「0-day」漏洞利用，是指軟體、硬體或韌體中未知或供應商尚未解決的漏洞。這些漏洞為攻擊者提供了優勢，讓他們在實施安全修補程式之前利用系統。

Trust Wallet received credible intelligence regarding the iMessage zero-day exploit and issued an alert on April 16th, urging Apple users to disable iMessage until Apple releases a security update. The exploit, according to Trust Wallet, is particularly dangerous as it does not require user interaction, such as clicking on a link or opening a malicious attachment. Once exploited, hackers could gain complete control over the victim's iPhone, including access to sensitive information, financial accounts, and crypto wallets.

Trust Wallet 收到了有關 iMessage 零日漏洞的可靠情報，並於 4 月 16 日發出警報，敦促 Apple 用戶停用 iMessage，直到 Apple 發布安全性更新。據 Trust Wallet 稱，該漏洞特別危險，因為它不需要用戶交互，例如點擊連結或開啟惡意附件。一旦被利用，駭客就可以完全控制受害者的 iPhone，包括存取敏感資訊、財務帳戶和加密錢包。

Eowyn Chen, CEO of Trust Wallet, shared a screenshot of a Dark Web listing offering the zero-day exploit for $2 million. While some industry experts expressed skepticism about the authenticity of the evidence, the potential severity of the exploit has raised concerns among security researchers and crypto enthusiasts alike.

Trust Wallet 執行長 Eowyn Chen 分享了一張暗網清單的螢幕截圖，以 200 萬美元的價格提供零日漏洞。儘管一些行業專家對證據的真實性表示懷疑，但該漏洞的潛在嚴重性引起了安全研究人員和加密貨幣愛好者的擔憂。

Despite the skepticism, Trust Wallet's alert generated widespread attention, with over 1.2 million users viewing it within four hours of its posting. Crypto analyst foobar later raised concerns about the potential panic that the alert could cause, prompting Trust Wallet to clarify that its intelligence came from its security team and partners who continuously monitor for threats.

儘管存在質疑，Trust Wallet 的警報引起了廣泛關注，發布後四個小時內就有超過 120 萬用戶查看了該警報。加密貨幣分析師 foobar 隨後對該警報可能引起的潛在恐慌表示擔憂，促使 Trust Wallet 澄清其情報來自其安全團隊和持續監控威脅的合作夥伴。

Apple has not yet publicly acknowledged or commented on the zero-day exploit. However, the company recently released emergency security updates to address two separate iOS zero-day vulnerabilities that were actively exploited in attacks on iPhones in the previous month.

蘋果尚未公開承認或評論零日漏洞。然而，該公司最近發布了緊急安全更新，以解決上個月在針對 iPhone 的攻擊中被積極利用的兩個獨立的 iOS 零日漏洞。

iMessage, Apple's native messaging application, has been targeted by hackers in the past. Security researchers at Kaspersky have identified iMessage as a common attack vector for attackers seeking to exploit vulnerabilities and compromise Apple devices. Cybersecurity firm Halborn has also warned that over 280 blockchain networks face potential zero-day exploits, putting billions of dollars worth of crypto assets at risk.

蘋果的本地訊息應用程式 iMessage 過去曾成為駭客的攻擊目標。卡巴斯基安全研究人員已將 iMessage 確定為攻擊者尋求利用漏洞並危害 Apple 裝置的常見攻擊媒介。網路安全公司 Halborn 也警告稱，超過 280 個區塊鏈網路面臨潛在的零日攻擊，使價值數十億美元的加密資產面臨風險。

The news of the iMessage zero-day exploit highlights the importance of vigilance in cybersecurity and the need for users to take proactive steps to protect their devices and digital assets. Users are advised to keep their iOS devices updated with the latest security patches, use strong passwords, and be cautious about clicking on links or opening attachments from unknown senders. Crypto wallet users should consider disabling iMessage until Apple releases a security update or using alternative messaging applications with enhanced security features.

iMessage 零日漏洞利用的消息凸顯了網路安全保持警惕的重要性以及用戶採取主動措施保護其設備和數位資產的必要性。建議用戶及時更新 iOS 裝置的最新安全補丁，使用強密碼，並謹慎點擊來自未知寄件者的連結或開啟附件。加密錢包用戶應考慮停用 iMessage，直到 Apple 發布安全性更新或使用具有增強安全功能的替代訊息應用程式。

The ongoing investigation into the iMessage zero-day exploit and the potential threat it poses to Apple users underscore the need for collaboration between security researchers, technology companies, and law enforcement agencies to safeguard digital infrastructure and protect users from malicious actors. As the technology landscape continues to evolve, it is crucial for all stakeholders to remain vigilant and adopt comprehensive cybersecurity measures to mitigate the risks associated with zero-day exploits and other emerging threats.

對iMessage 零日漏洞及其對Apple 用戶構成的潛在威脅的持續調查凸顯了安全研究人員、技術公司和執法機構之間的合作必要性，以保護數位基礎設施並保護用戶免受惡意行為者的侵害。隨著技術格局的不斷發展，所有利害關係人保持警惕並採取全面的網路安全措施來減輕與零時差漏洞和其他新興威脅相關的風險至關重要。