TRANS:门罗币(XMR)锁定转账攻击细节分析

By:ISME}'-H'Content-Type:application/json'

{

"id":"0",

"jsonrpc":"2.0",

"result":{

"in":[{

"address":"77Vx9cs1VPicFndSVgYUvTdLCJEZw9h81hXLMYsjBCXSJfUehLa9TDW3Ffh45SQa7xb6dUs18mpNxfUhQGqfwXPSMrvKhVp",

"amount":200000000000,

"confirmations":1,

"double_spend_seen":false,

"fee":21650200000,

"height":153624,

"note":"",

"payment_id":"0000000000000000",

"subaddr_index":{

"major":1,

"minor":0

},

"suggested_confirmations_threshold":1,

"timestamp":1535918400,

"txid":"c36258a276018c3a4bc1f195a7fb530f50cd63a4fa765fb7c6f7f49fc051762a",

"type":"in",

"unlock_time":0

}]

}

}

get_payments

Getalistofincomingpaymentsusingagivenpaymentid.

Alias:?None.

Inputs:

payment_id?-string;??PaymentIDusedtofindthepayments(16charactershex).

Outputs:

payments?-listof:

payment_id?-string;???PaymentIDmatchingtheinputparameter.

“永恒之蓝下载器木马”新增钓鱼邮件传播 利用用户机器挖矿门罗币获利:近期腾讯安全威胁情报中心检测到“永恒之蓝下载器木马”新增钓鱼邮件传播功能。“永恒之蓝”下载器木马在感染用户机器上运行后,会自动当前用户的邮箱通讯录并发送附件为urgent.doc的文档,该文档附带CVE-2017-8570漏洞(Office高危漏洞,又称沙虫二代)攻击代码。如果被攻击用户收到邮件并不慎打开文档,就可能触发漏洞执行Powershell命令下载mail.jsp。mail.jsp经过高度混淆,多次解密后可以看到其安装多个计划任务下载Powershell脚本执行,并使用了新的计划任务名:“Bluetea“蓝茶。“永恒之蓝”下载器木马自出现之后从未停止更新,从最初的PE样本攻击到后来转移为以Powershell无文件攻击方式躲避查杀,并且通过安装多个类型的计划任务进行持久化。在传播方式上,最初通过供应链攻击积累一批感染机器后,又不断利用”永恒之蓝”漏洞,MSSql爆破,$IPC爆破,RDP爆破等方法进行扩散传播,近期又增加了DGA域名攻击和钓鱼邮件攻击,其最终目的只为利用用户机器挖矿门罗币获利。(腾讯御见)[2020/4/3]

tx_hash?-string;???TransactionhashusedasthetransactionID.

amount?-unsigned???int;Amountforthispayment.

block_height?-???unsignedint;Heightoftheblockthatfirstconfirmedthispayment.

unlock_time?-unsignedint;Time(inblockheight)until???thispaymentissafetospend.

subaddr_index?-???subaddressindex:

major?-unsigned???int;Accountindexforthesubaddress.

minor?-???unsignedint;Indexofthesubaddressintheaccount.

address?-string;???Addressreceivingthepayment;Base58representationofthepublickeys.

Example:

$curl-XPOSThttp://127.0.0.1:18082/json_rpc-d'{"jsonrpc":"2.0","id":"0","method":"get_payments","params":{"payment_id":"60900e5603bf96e3"}}'-H'Content-Type:application/json'

{

"id":"0",

"jsonrpc":"2.0",

"result":{

"payments":[{

"address":"55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt",

"amount":1000000000000,

"block_height":127606,

声音 | 智能合约先驱Nick Szabo谈门罗币:我认为它比BTC有着更好的隐私性:今日,智能合约先驱尼克·萨博(Nick Szabo)在推特上在被问如何看待门罗币时回答表示:我认为它比BTC有着更好的隐私性,我鼓励人们使用它。[2019/7/21]

"payment_id":"60900e5603bf96e3",

"subaddr_index":{

"major":0,

"minor":0

},

"tx_hash":"3292e83ad28fc1cc7bc26dbd38862308f4588680fbf93eae3e803cddd1bd614f",

"unlock_time":0

}]

}

}

get_bulk_payments

Getalistofincomingpaymentsusingagivenpaymentid,oralistofpaymentsids,fromagivenheight.Thismethodisthepreferredmethodover?get_paymentsbecauseithasthesamefunctionalitybutismoreextendable.EitherisfineforlookinguptransactionsbyasinglepaymentID.

Alias:?None.

Inputs:

payment_ids?-array??of:string;PaymentIDsusedtofindthepayments(16charactershex).

min_block_height?-unsigned??int;Theblockheightatwhichtostartlookingforpayments.

Outputs:

payments?-listof:

payment_id?-string;???PaymentIDmatchingoneoftheinputIDs.

tx_hash?-string;???TransactionhashusedasthetransactionID.

amount?-???unsignedint;Amountforthispayment.

block_height?-???unsignedint;Heightoftheblockthatfirstconfirmedthispayment.

unlock_time?-unsignedint;Time(inblockheight)until???thispaymentissafetospend.

subaddr_index?-subaddress???index:

major?-???unsignedint;Accountindexforthesubaddress.

minor?-???unsignedint;Indexofthesubaddressintheaccount.

address?-string;???Addressreceivingthepayment;Base58representationofthepublickeys.

Example:

$curl-XPOSThttp://127.0.0.1:18082/json_rpc-d'{"jsonrpc":"2.0","id":"0","method":"get_bulk_payments","params":{"payment_ids":,"min_block_height":"120000"}}'-H'Content-Type:application/json'

{

"id":"0",

"jsonrpc":"2.0",

"result":{

"payments":[{

"address":"55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt",

"amount":1000000000000,

"block_height":127606,

"payment_id":"60900e5603bf96e3",

"subaddr_index":{

"major":0,

"minor":0

},

"tx_hash":"3292e83ad28fc1cc7bc26dbd38862308f4588680fbf93eae3e803cddd1bd614f",

"unlock_time":0

}]

}

}

get_transfer_by_txid

Showinformationaboutatransferto/fromthisaddress.

Alias:?None.

Inputs:

txid?-string;??TransactionIDusedtofindthetransfer.

account_index?-unsigned??int;(Optional)Indexoftheaccounttoqueryforthetransfer.

Outputs:

transfer?-JSON??objectcontainingpaymentinformation:

address?-string;???Addressthattransferredthefunds.Base58representationofthepublic???keys.

amount?-???unsignedint;Amountofthistransfer.

confirmations?-???unsignedint;Numberofblockminedsincetheblockcontainingthis???transaction(orblockheightatwhichthetransactionshouldbeaddedto???ablockifnotyetconfirmed).

destinations?-array???ofJSONobjectscontainingtransferdestinations:

amount?-???unsignedint;Amounttransferredtothisdestination.

address?-???string;Addressforthisdestination.Base58representationofthepublic???keys.

double_spend_seen?-???boolean;Trueifthekeyimage(s)forthetransferhavebeenseenbefore.

fee?-???unsignedint;Transactionfeeforthistransfer.

height?-???unsignedint;Heightofthefirstblockthatconfirmedthistransfer.

note?-string;???Noteaboutthistransfer.

payment_id?-string;???PaymentIDforthistransfer.

subaddr_index?-JSON???objectcontainingthemajor&minorsubaddressindex:

major?-???unsignedint;Accountindexforthesubaddress.

minor?-???unsignedint;Indexofthesubaddressundertheaccount.

suggested_confirmations_threshold?-???unsignedint;Estimationoftheconfirmationsneededforthetransaction???tobeincludedinablock.

timestamp?-???unsignedint;POSIXtimestampfortheblockthatconfirmedthistransfer???(ortimestampsubmissionifnotminedyet).

txid?-string;???TransactionIDofthistransfer(sameasinputTXID).

type?-string;???Typeoftransfer,oneofthefollowing:"in","out",???"pending","failed","pool"

unlock_time?-unsignedint;Numberofblocksuntil???transferissafelyspendable.

Example:

$curl-XPOSThttp://localhost:18082/json_rpc-d'{"jsonrpc":"2.0","id":"0","method":"get_transfer_by_txid","params":{"txid":"c36258a276018c3a4bc1f195a7fb530f50cd63a4fa765fb7c6f7f49fc051762a"}}'-H'Content-Type:application/json'

{

"id":"0",

"jsonrpc":"2.0",

"result":{

"transfer":{

"address":"55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt",

"amount":300000000000,

"confirmations":1,

"destinations":[{

"address":"7BnERTpvL5MbCLtj5n9No7J5oE5hHiB3tVCK5cjSvCsYWD2WRJLFuWeKTLiXo5QJqt2ZwUaLy2Vh1Ad51K7FNgqcHgjW85o",

"amount":100000000000

},{

"address":"77Vx9cs1VPicFndSVgYUvTdLCJEZw9h81hXLMYsjBCXSJfUehLa9TDW3Ffh45SQa7xb6dUs18mpNxfUhQGqfwXPSMrvKhVp",

"amount":200000000000

}],

"double_spend_seen":false,

"fee":21650200000,

"height":153624,

"note":"",

"payment_id":"0000000000000000",

"subaddr_index":{

"major":0,

"minor":0

},

"suggested_confirmations_threshold":1,

"timestamp":1535918400,

"txid":"c36258a276018c3a4bc1f195a7fb530f50cd63a4fa765fb7c6f7f49fc051762a",

"type":"out",

"unlock_time":0

}

}

}

点击查看官方文档:

https://www.getmonero.org/resources/developer-guides/wallet-rpc.html

郑重声明: 本文版权归原作者所有, 转载文章仅为传播更多信息之目的, 如作者信息标记有误, 请第一时间联系我们修改或删除, 多谢。

金星链

[0:15ms0-0:987ms