Max Lv(@m0d8ye):分析了一下这个恶意软件：https://t.co/6wxz6L9Dy0 由于其 "Extract authentication cookies/sessions from installed browsers for supported platforms. Outputs JSON with cookies for: X (Twitter), Instagram, LinkedIn, Slack. Also extracts Telegram Desktop session from local tdata directory." 建议中招的同学把所有常用网站的 web session 都 revoke 了

Max Lv

@m0d8ye

Chip Architect (2013-Present) at NVIDIA | Bitcoin Enthusiast since 2011. Open source developer: Views are my own.

Joined June 2009

351 Following 20K Followers

Max Lv@m0d8ye

2026.08.04 10:30

分析了一下这个恶意软件：由于其 "Extract authentication cookies/sessions from installed browsers for supported platforms. Outputs JSON with cookies for: X (Twitter), Instagram, LinkedIn, Slack. Also extracts Telegram Desktop session from local tdata directory." 建议中招的同学把所有常用网站的 web session 都 revoke 了

Max Lv@m0d8ye

2026.08.04 09:20

今天才发现中招了一个恶意软件：com.noxai.nox.RPLY 好在用 Claude 找出来了。。。