Trust Wallet 警告 Apple 用户注意严重的 iMessage 零日漏洞

加密钱包提供商 Trust Wallet 敦促苹果用户禁用 iMessage，因为潜在的零日漏洞可能会让黑客控制 iPhone。据“可靠情报”称，该漏洞可以在没有用户交互的情况下渗透 iPhone，针对高价值帐户。这一警告引起了人们的担忧，一些专家质疑证据的真实性，而另一些专家则强调采取预防措施的重要性。

Trust Wallet Warns Apple Users of Critical iMessage Zero-Day Exploit

Trust Wallet 警告 Apple 用户注意严重的 iMessage 零日漏洞

In a concerning development, crypto wallet provider Trust Wallet has alerted Apple users to a potential zero-day exploit targeting the iMessage application on iPhones. This exploit, reportedly being sold on the Dark Web for millions of dollars, could allow hackers to gain unrestricted access to users' iPhones and compromise their valuable digital assets, including cryptocurrencies.

令人担忧的是，加密钱包提供商 Trust Wallet 已提醒 Apple 用户注意针对 iPhone 上的 iMessage 应用程序的潜在零日攻击。据报道，这一漏洞在暗网上以数百万美元的价格出售，黑客可以不受限制地访问用户的 iPhone，并损害他们宝贵的数字资产，包括加密货币。

Zero-day exploits, also known as "day zero" or "0-day" exploits, refer to vulnerabilities in software, hardware, or firmware that are unknown or have not yet been addressed by the vendor. These vulnerabilities provide attackers with an advantage by allowing them to exploit systems before security patches can be implemented.

零日漏洞利用，也称为“零日”或“0-day”漏洞利用，是指软件、硬件或固件中未知或供应商尚未解决的漏洞。这些漏洞为攻击者提供了优势，允许他们在实施安全补丁之前利用系统。

Trust Wallet received credible intelligence regarding the iMessage zero-day exploit and issued an alert on April 16th, urging Apple users to disable iMessage until Apple releases a security update. The exploit, according to Trust Wallet, is particularly dangerous as it does not require user interaction, such as clicking on a link or opening a malicious attachment. Once exploited, hackers could gain complete control over the victim's iPhone, including access to sensitive information, financial accounts, and crypto wallets.

Trust Wallet 收到了有关 iMessage 零日漏洞利用的可靠情报，并于 4 月 16 日发出警报，敦促 Apple 用户禁用 iMessage，直到 Apple 发布安全更新。据 Trust Wallet 称，该漏洞特别危险，因为它不需要用户交互，例如单击链接或打开恶意附件。一旦被利用，黑客就可以完全控制受害者的 iPhone，包括访问敏感信息、财务账户和加密钱包。

Eowyn Chen, CEO of Trust Wallet, shared a screenshot of a Dark Web listing offering the zero-day exploit for $2 million. While some industry experts expressed skepticism about the authenticity of the evidence, the potential severity of the exploit has raised concerns among security researchers and crypto enthusiasts alike.

Trust Wallet 首席执行官 Eowyn Chen 分享了一张暗网列表的屏幕截图，以 200 万美元的价格提供零日漏洞利用。尽管一些行业专家对证据的真实性表示怀疑，但该漏洞的潜在严重性引起了安全研究人员和加密货币爱好者的担忧。

Despite the skepticism, Trust Wallet's alert generated widespread attention, with over 1.2 million users viewing it within four hours of its posting. Crypto analyst foobar later raised concerns about the potential panic that the alert could cause, prompting Trust Wallet to clarify that its intelligence came from its security team and partners who continuously monitor for threats.

尽管存在质疑，Trust Wallet 的警报还是引起了广泛关注，发布后四个小时内就有超过 120 万用户查看了该警报。加密货币分析师 foobar 随后对该警报可能引起的潜在恐慌表示担忧，促使 Trust Wallet 澄清其情报来自其安全团队和持续监控威胁的合作伙伴。

Apple has not yet publicly acknowledged or commented on the zero-day exploit. However, the company recently released emergency security updates to address two separate iOS zero-day vulnerabilities that were actively exploited in attacks on iPhones in the previous month.

苹果尚未公开承认或评论零日漏洞。然而，该公司最近发布了紧急安全更新，以解决上个月在针对 iPhone 的攻击中被积极利用的两个独立的 iOS 零日漏洞。

iMessage, Apple's native messaging application, has been targeted by hackers in the past. Security researchers at Kaspersky have identified iMessage as a common attack vector for attackers seeking to exploit vulnerabilities and compromise Apple devices. Cybersecurity firm Halborn has also warned that over 280 blockchain networks face potential zero-day exploits, putting billions of dollars worth of crypto assets at risk.

苹果的本地消息应用程序 iMessage 过去曾成为黑客的攻击目标。卡巴斯基安全研究人员已将 iMessage 确定为攻击者寻求利用漏洞并危害 Apple 设备的常见攻击媒介。网络安全公司 Halborn 还警告称，超过 280 个区块链网络面临潜在的零日攻击，使价值数十亿美元的加密资产面临风险。

The news of the iMessage zero-day exploit highlights the importance of vigilance in cybersecurity and the need for users to take proactive steps to protect their devices and digital assets. Users are advised to keep their iOS devices updated with the latest security patches, use strong passwords, and be cautious about clicking on links or opening attachments from unknown senders. Crypto wallet users should consider disabling iMessage until Apple releases a security update or using alternative messaging applications with enhanced security features.

iMessage 零日漏洞利用的消息凸显了网络安全保持警惕的重要性以及用户采取主动措施保护其设备和数字资产的必要性。建议用户及时更新 iOS 设备的最新安全补丁，使用强密码，并谨慎点击来自未知发件人的链接或打开附件。加密钱包用户应考虑禁用 iMessage，直到 Apple 发布安全更新或使用具有增强安全功能的替代消息应用程序。

The ongoing investigation into the iMessage zero-day exploit and the potential threat it poses to Apple users underscore the need for collaboration between security researchers, technology companies, and law enforcement agencies to safeguard digital infrastructure and protect users from malicious actors. As the technology landscape continues to evolve, it is crucial for all stakeholders to remain vigilant and adopt comprehensive cybersecurity measures to mitigate the risks associated with zero-day exploits and other emerging threats.

对 iMessage 零日漏洞及其对 Apple 用户构成的潜在威胁的持续调查凸显了安全研究人员、技术公司和执法机构之间的合作必要性，以保护数字基础设施并保护用户免受恶意行为者的侵害。随着技术格局的不断发展，所有利益相关者保持警惕并采取全面的网络安全措施来减轻与零日漏洞和其他新兴威胁相关的风险至关重要。