.

Recently, some users have reported that after using antivirus software, certain browser extensions (especially crypto wallet extensions) were falsely flagged as malware, causing their JS files to be quarantined or deleted, resulting in wallet corruption. ✍️In our latest article, we cover how to properly restore quarantined extension data and introduce the open-source PhantomKeyRetriever script (github.com/slowmist/PhantomK…) to recover Phantom wallet mnemonics or private keys from Chrome data. 🔗Read the full guide here: slowmist.medium.com/how-to-r…

⚠️A critical vulnerability (GHSA-vjh7-7g9h-fjfh) has been discovered in the widely-used elliptic encryption library. 😈Attackers can exploit this flaw by crafting specific inputs to extract private keys with just a single signature, potentially compromising digital assets or identity credentials. ✍️In our latest article, we break down the vulnerability—its root cause, impact, and how to mitigate the risks. ❤️Special thanks to @Rabby_io for providing the vulnerability intelligence. 🔗Read the full analysis here: slowmist.medium.com/private-…

🚨 Scammers using tactics like the fake "Safeguard" scheme are openly promoting their Telegram account-stealing methods. This video shows how it works⬇️ 📩 They send you a Telegram message 🔗 Push you to "verify" something 🔢 You enter your login code 🎣 They grab your session info 💀 Your account is gone Next, they search for private keys in bots. If they fully take over your account, they'll impersonate you to scam your friends.⚠️ Variations of this scam are spreading—like random messages warning of "account risks" and pushing fake security checks. Stay vigilant!

Thanks for the shoutout! Security is key in the blockchain, and we’re glad to contribute. Keep building!⚡

🚨 Since June 2024, the SlowMist security team has been invited by multiple teams to conduct forensic investigations into several hacking incidents.🧐 After accumulating prior intelligence and conducting an in-depth analysis over the past 30 days, we have completed a review of the attackers’ tactics and intrusion paths. The results indicate that this is a state-sponsored #APT attack targeting cryptocurrency exchanges. 🔎 Our forensic analysis and correlation tracking confirm that #LazarusGroup is behind these attacks. In this report, we break down their tactics and provide key defense strategies against APT attacks. 🛡️ Cybersecurity is a long-term battle. Stay vigilant! 📖 slowmist.medium.com/cryptocu…

North Korean hackers AGAIN⚠️ ✍️In this article, the SlowMist Security Team analyzes the #Bybit hacker's attack techniques and fund movements @MistTrack_io , while also raising some questions. (We also look forward to the official disclosure of more investigation results.) Dive in here⬇️ slowmist.medium.com/slowmist…

🚨SlowMist Security Alert🚨 The @0xinfini contract was attacked and approximately $50 million in funds was stolen. We are following up on this incident.