BTC $56051.8376
ETH $3218.1633
BNB $396.4199
SOL $110.7149
XRP $0.5519
ADA $0.6156
AVAX $39.1198
DOGE $0.0917
TRX $0.1407
wstETH $3728.9977
LINK $19.0128
DOT $8.0469
WETH $3193.8813
MATIC $1.0418
UNI $10.7764
WBTC $55911.0276
IMX $3.3222
ICP $12.9221
BCH $297.7215
LTC $75.3171
CAKE $3.2025
FIL $8.1465
ETC $28.0611
RNDR $7.5168
KAS $0.1715
DAI $1.0043
HBAR $0.1103
ATOM $11.0992
VET $0.0490
INJ $36.1781
TON $2.1807
OKB $51.3647
STX $3.1226
LDO $3.5279
FDUSD $0.9998
XMR $138.2001
TIA $17.3425
ARB $1.9103
NEAR $3.9893
XLM $0.1190
GRT $0.2848
ENS $22.1628
THETA $2.1616
WEMIX $2.1065
APEX $2.4652
MKR $2118.4103
BEAM $0.0360
BTC $56051.8376
ETH $3218.1633
BNB $396.4199
SOL $110.7149
XRP $0.5519
ADA $0.6156
AVAX $39.1198
DOGE $0.0917
TRX $0.1407
wstETH $3728.9977
LINK $19.0128
DOT $8.0469
WETH $3193.8813
MATIC $1.0418
UNI $10.7764
WBTC $55911.0276
IMX $3.3222
ICP $12.9221
BCH $297.7215
LTC $75.3171
CAKE $3.2025
FIL $8.1465
ETC $28.0611
RNDR $7.5168
KAS $0.1715
DAI $1.0043
HBAR $0.1103
ATOM $11.0992
VET $0.0490
INJ $36.1781
TON $2.1807
OKB $51.3647
STX $3.1226
LDO $3.5279
FDUSD $0.9998
XMR $138.2001
TIA $17.3425
ARB $1.9103
NEAR $3.9893
XLM $0.1190
GRT $0.2848
ENS $22.1628
THETA $2.1616
WEMIX $2.1065
APEX $2.4652
MKR $2118.4103
BEAM $0.0360
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Google Chrome allows hackers to steal cryptocurrency via symbolic link


    Analysts at Imperva have revealed details of a patched vulnerability in Google Chrome and Chromium-based browsers that allowed access to sensitive data.

    The problem arose from the way the browser interacted with symbolic links when handling files and directories. In particular, the browser did not properly check if the symbolic link was pointing to a location that should not have been accessible, allowing confidential files to be stolen.

    The CVE-2022-3656 vulnerability has been described by Google as a File System Data Insufficiency Validation Vulnerability. The bug has been fixed in Google Chrome versions 107 and 108.

    The flaw, dubbed SymStealer, is a symbolic link vulnerability that occurs when an attacker creates a symbolic link to sensitive files in order to bypass file system restrictions on accessing unauthorized files.

    According to Imperva's analysis, when a user directly dragged a folder onto a file input element, the browser recursively resolved all symlinks without any warning. In a hypothetical attack, a cybercriminal could trick a victim into visiting a fake website and downloading a ZIP archive containing a symbolic link to a valuable file or folder on a computer, such as crypto wallet keys and credentials.

    When the same symlink file is uploaded back to a website (for example, a crypto wallet platform prompts the user to upload their recovery keys), the vulnerability allows the symlink to access the actual file containing the passphrase.

    Author DeepWeb
    ​Zombie substance
    StrRAT and Ratty operators use polyglot files to make Trojans less visible

    Comments 0

    Add comment