解决 6800 万美元加密勒索案中的投毒者返还部分资金并开启谈判

一名涉嫌地址中毒的攻击者已将价值 153,000 美元的以太币 (ETH) 返还给受害者，该受害者在通过地址中毒攻击促成的交易中损失了 6800 万美元的 Wrapped Bitcoin (WBTC)。攻击者发送一条消息，表示愿意谈判，并请求受害者提供 Telegram 用户名以进行联系。返还的金额仅占据称被盗资金总额的 0.225%。

Attacker in $68 Million Address Poisoning Extortion Case Makes Partial Restitution and Initiates Negotiations

价值 6800 万美元的地址中毒勒索案中的攻击者部分赔偿并启动谈判

A malicious actor responsible for an address poisoning attack that resulted in the theft of $68 million worth of Wrapped Bitcoin (WBTC) has initiated negotiations with the victim by sending back a substantial portion of the stolen funds.

一名恶意攻击者发起了一次地址中毒攻击，导致价值 6800 万美元的 Wrapped Bitcoin (WBTC) 被盗，该攻击者已开始与受害者进行谈判，退回大部分被盗资金。

Alleged Extortion and Theft

涉嫌敲诈勒索和盗窃

On May 3, the attacker allegedly exploited an address poisoning vulnerability to trick the victim into sending 1,155 WBTC (worth approximately $68 million at the time) to their account. Address poisoning attacks involve bombarding victims with transactions that appear to originate from their own accounts, creating confusion and potentially leading to unintended transfers.

5 月 3 日，攻击者据称利用地址中毒漏洞诱骗受害者向其账户发送 1,155 个 WBTC（当时价值约 6800 万美元）。地址中毒攻击涉及用看似源自受害者自己账户的交易轰炸受害者，造成混乱并可能导致意外转移。

Partial Restitution and Communication

部分恢复和沟通

In an apparent gesture of good faith, the attacker has now sent back approximately $153,000 worth of Ether (ETH) to the victim's account. The transfer was accompanied by a communication expressing willingness to negotiate and requesting the victim's Telegram username for further contact.

出于明显的诚意，攻击者现已将价值约 153,000 美元的以太币 (ETH) 退回受害者的账户。转账过程中还附有一份通信，表示愿意进行谈判，并要求受害者提供 Telegram 用户名以便进一步联系。

Negotiation Attempt

谈判尝试

Blockchain records indicate that the victim had previously attempted to negotiate with the attacker, offering to pay a 10% bounty for the return of the stolen funds. In response, the attacker sent 51 ETH (approximately $153,000) and conveyed a message through an Ethereum transaction, stating: "Please leave your Telegram and I will contact you."

区块链记录显示，受害者此前曾尝试与攻击者进行谈判，提出支付 10% 的赏金以返还被盗资金。作为回应，攻击者发送了 51 ETH（约 153,000 美元），并通过以太坊交易传达了一条消息，声明：“请留下您的 Telegram，我会与您联系。”

Address Poisoning Modus Operandi

地址中毒作案手法

The attacker's alleged address poisoning technique involved using a custom-designed token with a malicious contract. By transferring a small amount of this token from the victim's account to their own, the attacker exploited a loophole that allowed them to subsequently withdraw a significant amount of WBTC without the victim's consent.

攻击者所谓的地址中毒技术涉及使用带有恶意合约的定制代币。通过将少量该代币从受害者的账户转移到自己的账户，攻击者利用了一个漏洞，允许他们随后在未经受害者同意的情况下提取大量 WBTC。

Security Recommendations

安全建议

To safeguard against address poisoning attacks, security experts emphasize the importance of meticulously verifying the sending address in any transaction. By being vigilant and scrutinizing transactions, users can minimize the risk of falling victim to these malicious tactics.

为了防范地址中毒攻击，安全专家强调在任何交易中仔细验证发送地址的重要性。通过保持警惕和审查交易，用户可以最大限度地减少成为这些恶意策略受害者的风险。

Ongoing Negotiations

正在进行的谈判

The negotiations between the victim and the attacker are ongoing, with the latest developments indicating a willingness from both parties to reach a resolution. The outcome of these negotiations and the fate of the remaining stolen funds remain uncertain.

受害者和攻击者之间的谈判正在进行中，最新进展表明双方都愿意达成解决方案。这些谈判的结果以及剩余被盗资金的命运仍然不确定。