PANews reported on March 12 that in response to the hacking incident disclosed in January , the fingerprint browser AdsPower stated on the X platform: "We have fixed the vulnerability and strengthened the system security as soon as possible. We have reported the incident to the Singapore authorities and are actively cooperating with the police investigation. We also welcome users to provide clues to the Singapore authorities." In addition, AdsPower announced that it would provide the "User Experience Value-added Service Plan" to users affected by this incident.
AdsPower stated that the current attack source tracing analysis has reached preliminary conclusions. Based on technical tracing analysis, it can be determined that in this incident, the attacker exploited a vulnerability in a third-party technical service system to upload and spread a maliciously tampered MetaMask plug-in. This week, the application center will be fully upgraded: the recommended plug-ins in the AdsPower application center will be upgraded to directly reference the download link of the Chrome Web Store. AdsPower said: "In the future, we will gradually implement a series of security improvement measures, covering network security, secure development processes, emergency response capabilities, etc. We will also re-evaluate the cooperation model with various third-party technical service providers, strengthen the definition and supervision of security responsibilities, and further ensure the overall security of the system."
