https://blog.1sec.day/tags/%E6%A0%B7%E6%9C%AC%E5%88%86%E6%9E%90/ Recent content in 样本分析 on 思安录 | Thinking's Security Notes Hugo -- gohugo.io zh-cn Thinking Thinking Wed, 15 Jul 2026 00:00:00 +0000 https://blog.1sec.day/posts/2026-07-15-grok-cli-codebase-exfiltration/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2026-07-15-grok-cli-codebase-exfiltration/ https://blog.1sec.day/posts/2026-07-15-telegram-desktop-local-session-reuse/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2026-07-15-telegram-desktop-local-session-reuse/ <blockquote> <p>导读：这个复现结果超出了我原本的认知。Telegram 的设备认证机制——手机号验证、短信验证码、二次验证密码——在我的理解里是设计完备的。但当 tdata 被复制到另一台 Mac 后启动客户端，登录界面没有出现。这不是 2FA 被破解了，而是整个复用过程根本没有触发需要验证的环节。</p> </blockquote> https://blog.1sec.day/posts/2025-12-26-trust-wallet-extension-backdoor/ Fri, 26 Dec 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-12-26-trust-wallet-extension-backdoor/ https://blog.1sec.day/posts/2025-07-03-solana-bot-supply-chain-attack/ Thu, 03 Jul 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-07-03-solana-bot-supply-chain-attack/ https://blog.1sec.day/posts/2026-07-16-fake-reputation-crypto-clipboard-hijacker/ Fri, 20 Jun 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2026-07-16-fake-reputation-crypto-clipboard-hijacker/ <blockquote> <p>导读：当 GitHub 的 Star、SourceForge 的下载量、YouTube 的播放量、VirusTotal 的&quot;安全&quot;投票全部可被伪造，&ldquo;社会证明&quot;这套信任机制本身就成了攻击面。Check Point 这份研究揭示了一个把恶意软件伪装成热门项目玩出花样的 Rust 剪贴板劫持器 campaign，值得每一位安全从业者关注。</p> </blockquote> https://blog.1sec.day/posts/2025-05-28-osiris-malicious-extension/ Wed, 28 May 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-05-28-osiris-malicious-extension/ https://blog.1sec.day/posts/2025-03-15-linkedin-recruitment-phishing/ Sat, 15 Mar 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-03-15-linkedin-recruitment-phishing/ https://blog.1sec.day/posts/2026-07-16-fake-captcha-clipboard-hijacker/ Tue, 11 Mar 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2026-07-16-fake-captcha-clipboard-hijacker/ <blockquote> <p>导读：当&quot;证明你不是机器人&quot;本身成了攻击入口，你每一次对 CAPTCHA 的习惯性顺从，都可能是一次自感染。Malwarebytes 在 2025 年 3 月披露的这套 ClickFix 攻击手法，把&quot;用户自己感染自己&quot;这件事做到了规模化复制。</p> </blockquote> https://blog.1sec.day/posts/2024-05-31-aggr-malicious-chrome-extension/ Fri, 31 May 2024 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2024-05-31-aggr-malicious-chrome-extension/ https://blog.1sec.day/posts/2022-08-04-solana-massive-theft/ Thu, 04 Aug 2022 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2022-08-04-solana-massive-theft/