朝鲜黑客盗取ORO约63万美元加密货币

Odaily reports that ORO, an AI shopping agent developer, disclosed a loss of approximately $630,000 due to a suspected North Korean hacker attack. The attackers, using a compromised Telegram account, sent a phishing link mimicking Microsoft Teams to an ORO employee, tricking them into installing a malicious extension. After nearly a month of data theft, they stole 147,000 Alpha tokens on July 13th. ORO is highly confident the attack was carried out by the North Korean hacking group Sapphire Sleet. ORO also acknowledged its own security lapses, stating that due to insufficient hardware wallet support in the Bittensor protocol, the company had temporarily stored its owner key in a software wallet, violating the internal principle of prioritizing hardware wallets. This allowed the key to be stolen from the compromised computer.