吴说获悉，据安全机构 Socket 威胁研究团队报告，恶意 Chrome 扩展程序 “MEXC API Automator” 自 2025 年 9 月 1 日起在 Chrome Web Store 上架，可在用户不知情情况下为 MEXC 账户生成带提现权限的 API 密钥，并刻意隐藏相关权限提示，随后将密钥等信息回传至攻击者控制的 Telegram ...

A malicious Chrome extension posing as a trading tool steals MEXC API keys, enables withdrawals, and sends credentials to ...

Malicious Chrome extensions on the Chrome Web Store masquerading as productivity and security tools for enterprise HR and ERP ...

Five fake Chrome extensions impersonate Workday and NetSuite to steal cookies, block admin controls, and hijack sessions for ...

PANews 1月14日消息，据安全机构Socket威胁研究团队报告，一款名为“MEXC API ...

网络安全研究人员近日披露了一款恶意Google Chrome扩展程序的详细信息。该扩展程序伪装成自动化交易工具，专门窃取与MEXC交易所相关的API密钥。MEXC是一家业务覆盖170多个国家的中心化加密货币交易所（CEX）。 这款名为"MEXC ...

AutoKuma wraps around Uptime Kuma as a container-aware sidecar, turning Docker labels into live uptime checks.

A brand-new Linux malware named VoidLink targets victims' cloud infrastructure with more than 30 plugins that allow attackers ...

A newly discovered advanced cloud-native Linux malware framework named VoidLink focuses on cloud environments, providing ...

An important aspect in software engineering is the ability to distinguish between premature, unnecessary, and necessary ...

Check Point researchers have discovered a modular malware framework likely designed by Chinese developers to harvest ...

A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, ...