某 CEX 泄露 150 万用户数据,黑客通过撞库和爬取方式获取敏感信息

Gate News 消息,3 月 30 日,据网络安全平台 VECERT 于 3 月 28 日披露,黑客以 PexRat 为名,在暗网出售包含 150 万名某 CEX 用户个人信息的数据库,内容涵盖姓名、电邮、电话号码、KYC 认证状态、登录 IP 地址及双重验证方式等敏感信息。分析指出,此次事件并非直接入侵该交易所内部服务器,而是攻击者绕过验证码机制,通过撞库与自动化爬取方式获取数据。受影响用户面临 SIM 卡劫持及钓鱼攻击的高风险。此事件发生之际,该交易所机构 OTC 交易业务正高速增长,仅今年 1 至 2 月,交易量已达 2025 年全年总量的 25%。这是继 1 月份 42 万组账号凭证遭泄露后,该交易所再度面临的数据安全危机。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento