Check Point found a critical vulnerability in the Ever Surf wallet – Bits Media

In the web version of the Ever Surf wallet for blockchain Everscale (Previously - Freeton) Found vulnerability, allowing hackers to steal from user crypto actives. The developers have already eliminated the error.

Ever Surf wallet performs the function, Providing Users access to decentralized applications, as well as the possibility of sending and obtaining inconsistent tokens (NFT). Cybersecurity specialists of Check Point reported, that with the help of malicious extensions of the browser or phishing links, attackers could gain full control over user wallets. With the help of these attacks, scammers could decipher closed keys and sid-frazes, stored in the local storage of the browser.

Considering, that the information in this storage is not encrypted, it could be stolen using malicious, capable of collecting data from different browsers. Having received a notice of vulnerability, Ever Surf developers updated the web application, and its outdated version is now used only by developers. Despite, that the discovered vulnerability has already been eliminated, Check Point recommends that users not lose vigilance, since they may encounter such threats in other decentralized applications.

Specialist Check Point Alexander Chaylytko warned, what if hackers manage to take possession of user keys, They gain full control over the means of victims. Therefore, when working with cryptocurrencies, maximum caution should be shown, In order not by chance not to establish a malicious program. Cybersecurity experts recommend that the operating system renew the operating system in a timely manner, set antivirus software and do not cross on suspicious links.

Recently, Check Point researchers have discovered a similar vulnerability in the site for creating NFT Rarible. And a few years ago, a favorite view of cyber attacks among criminals was the spread of software for hidden mining of cryptocurrencies in cloud infrastructures.