BlockBeats Mobile H5 Page Infected with Malicious Script

iconKuCoinFlash
Share
AI summary iconSummary
A recent security incident affected the BlockBeats mobile H5 page. On October 22, a malicious script from a third-party domain was injected into an article titled "Global Market Risk Aversion...". Users searching for the article encountered both the original and the compromised version. The issue was resolved promptly and impacted iOS versions 18.6–18.7.2 and iOS 26.0–26.1. Users are advised to upgrade to iOS 27. The team also patched several PHP vulnerabilities and reaffirmed that BlockBeats does not support wallet login—any app requesting such access is fraudulent. Script access controls and monitoring are being enhanced. This incident serves as a critical reminder in on-chain news of the importance of platform security.

This week, multiple security firms reported security vulnerabilities related to DarkSword to律动 BlockBeats. Upon investigation, we discovered that on October 22, an article titled "Global Market Risk-Off Sentiment..." on our mobile web H5 page was copied by an attack group, which embedded an anomalous script from a third-party domain. When users searched for this news item, both the original article and the malicious version with the embedded script appeared in the search results. We immediately reproduced the issue and completed its removal and remediation upon confirmation.


Meanwhile, the actual exploitable window for the DarkSword security vulnerability is limited to the iOS versions 18.6–18.7.2 and iOS 26.0–26.1. We also urge all iOS users to update to the latest iOS 27 system promptly.


Following the global PHP vulnerability incident this week,律动 BlockBeats has identified over a dozen related vulnerabilities, and technical teams are continuing their investigation.


It is important to emphasize that BlockBeats has never supported any "wallet login" or "connect wallet" functionality. Any BlockBeats app requiring "wallet login" or "connect wallet" is a fraudulent third-party app. BlockBeats will further strengthen the review and change management of third-party scripts, continuously monitor externally loaded resources on pages, and improve alerting and response procedures for abnormal situations.


Here, we also extend our gratitude to security firms such as SlowMist and GCSA for their immediate assistance, and we thank everyone on the front lines working to safeguard the industry.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.