支付宝“碰一碰”NFC支付曝安全漏洞，风险利用可能性低
2025年1月5日，OneKey安全实验室披露，支付宝“碰一碰”NFC支付设备部分芯片存在漏洞，可能被攻击者篡改内容，将支付链接替换为钓鱼地址，导致资金被转移。该漏洞利用需物理接触设备并未被商家察觉，实际风险较低。
支付宝已于2024年12月更新新设备以修复漏洞，但旧设备因无法在线更新仍存隐患。专家建议商家及时更换至新版设备，并警惕支付异常情况以保障安全。
BY 隐私中国 Dark Web Inform
n the U.S. people generally use Bitcoin as an alternative investment, helping diversify a portfolio apart from stocks and bonds. You can also use Bitcoin to make purchases, but the number of vendors that accept the cryptocurrency is still limited. Big companies that accept Bitcoin include Overstock, AT&T and Twitch. You may also find that some small local retailers or certain websites take Bitcoin, but you’ll have to do some digging. That said, PayPal has announced that it will enable cryptocurrency as a funding source for purchases this year, financing purchases by automatically converting crypto holdings to fiat currency for users. “They have 346 million users and they’re connected to 26 million merchants,” says Spencer Montgomery, founder of Uinta Crypto Consulting. “It’s huge.”
The campaign, which security firm Check Point has named Rampant Kitten, comprises two main components, one for Windows and the other for Android. Rampant Kitten’s objective is to steal Telegram messages, passwords, and two-factor authentication codes sent by SMS and then also take screenshots and record sounds within earshot of an infected phone, the researchers said in a post published on Friday.
telegram from us