<div class="container"> <!-- 顶部栏：黑客终端日志 + 语言切换 --> <div class="terminal-topbar"> <div class="terminal-header"> <div class="terminal-dots"> <div class="dot dot-red"></div> <div class="dot dot-yellow"></div> <div class="dot dot-green"></div> </div> <div class="typing-text" id="terminal-log">> INITIALIZING CYBER THREAT MONITOR...</div> </div> <div class="lang-switch" role="group" aria-label="Language / 语言"> <button type="button" class="lang-btn" data-lang="zh" aria-pressed="true">中文</button> <button type="button" class="lang-btn" data-lang="en" aria-pressed="false">EN</button> </div> </div> <!-- 头部主标题区 --> <header> <div class="badge" data-i18n="badge">⚠️ 链上安全警示风险通知</div> <h1> <span data-i18n="h1Prefix">黑客视角：</span><span data-i18n="h1Em">USDT 及虚拟货币</span><span data-i18n="h1Suffix"> 如何在数秒内被盗刷？</span> </h1> <p class="subtitle" data-i18n="subtitle">揭秘攻击者的隐藏攻击链路，提高链上资产防范意识</p> </header> <!-- 视频展示区 --> <div class="section-card"> <div class="section-title"> <span>📹</span> <span data-i18n="videoTitle">最新真实被盗刷案例追踪 (20-30s 演示)</span> </div> <div class="video-wrapper"> <video controls preload="metadata" poster="assets/video-poster.jpg"> <source src="assets/demo.mp4" type="video/mp4"> <span data-i18n="videoUnsupported">您的浏览器不支持 HTML5 视频播放。</span> </video> </div> <p class="video-caption" data-i18n="videoCaption">演示素材仅作安全示意 · 仅供链上安全教育使用</p> </div> <!-- 盗刷过程拆解 --> <div class="section-card"> <div class="section-title"> <span>🧩</span> <span data-i18n="stepsTitle">盗刷全过程三步拆解</span> </div> <div class="steps-grid"> <div class="step-item"> <div class="step-num" data-i18n="step01Num">STEP 01 / 钓鱼诱导</div> <div class="step-title" data-i18n="step01Title">伪装链接与二维码</div> <div class="step-desc" data-i18n="step01Desc">攻击者伪装成官方空投、优惠活动或「钱包安全检测」，通过社群、短信、私信散播仿冒链接与二维码，诱导用户进入高仿钓鱼网站。</div> </div> <div class="step-item"> <div class="step-num" data-i18n="step02Num">STEP 02 / 恶意授权</div> <div class="step-title" data-i18n="step02Title">诱骗签署 Approve</div> <div class="step-desc" data-i18n="step02Desc">钓鱼页弹出伪装成「领取奖励」「验证身份」的签名请求，实质是 USDT 无限额度授权（Approve）。一旦确认，钱包内对应资产的控制权即被拱手让人。</div> </div> <div class="step-item"> <div class="step-num" data-i18n="step03Num">STEP 03 / 秒级转移</div> <div class="step-title" data-i18n="step03Title">资产瞬间清空</div> <div class="step-desc" data-i18n="step03Desc">攻击合约凭借已获得的授权发起转账，数秒内将钱包内 USDT 全部转走，并经多层地址快速分散。链上交易不可撤销，资金极难追回。</div> </div> </div> </div> <!-- 安全防护建议 --> <div class="section-card"> <div class="section-title"> <span>🛡️</span> <span data-i18n="tipsTitle">安全防护建议</span> </div> <ul class="security-list"> <li data-i18n="tip01">不点击来源不明的链接与二维码，认准官方域名，仔细辨别「高仿」网址。</li> <li data-i18n="tip02">签名前逐字核对授权内容，凡是索要「无限额度授权」的请求一律拒绝。</li> <li data-i18n="tip03">定期检查钱包授权记录，及时取消（Revoke）闲置或可疑的代币授权。</li> <li data-i18n="tip04">大额资产使用硬件钱包或多签钱包冷存储，与日常使用的热钱包隔离。</li> <li data-i18n="tip05">任何官方客服都不会索要助记词、私钥或短信验证码，主动索要的均为骗子。</li> <li data-i18n="tip06">大额转账前先进行小额测试，确认收款地址无误后再执行完整转账。</li> </ul> </div> <!-- 页脚 --> <footer> <div data-i18n="footer01">本页面仅用于链上安全教育与风险提示，不构成任何投资建议。</div> <div class="warning-text" data-i18n="footer02">⚠️ 链上转账不可逆，请时刻保持警惕，谨防钓鱼与恶意授权。</div> </footer> </div> <script> /* ============================================================ * i18n：文案字典 + 按浏览器语言 ID 自动切换 + 手动切换记忆 * 默认语言 zh；navigator.language 以 zh 开头用中文，其余用英文 * ========================================================== */ var I18N_STORAGE_KEY = 'usdt-alert-lang'; var I18N = { zh: { _docTitle: '⚠️ 警示：USDT 与加密货币盗刷全过程揭秘', badge: '⚠️ 链上安全警示风险通知', h1Prefix: '黑客视角：', h1Em: 'USDT 及虚拟货币', h1Suffix: ' 如何在数秒内被盗刷？', subtitle: '揭秘攻击者的隐藏攻击链路，提高链上资产防范意识', videoTitle: '真实盗刷案件 · 人物档案实录', videoUnsupported: '您的浏览器不支持 HTML5 视频播放。', videoCaption: '案件源自检察机关与媒体公开报道 · 人物为匿名剪影重建 · 仅供安全教育', stepsTitle: '盗刷全过程三步拆解', step01Num: 'STEP 01 / 钓鱼诱导', step01Title: '伪装链接与二维码', step01Desc: '攻击者伪装成官方空投、优惠活动或「钱包安全检测」，通过社群、短信、私信散播仿冒链接与二维码，诱导用户进入高仿钓鱼网站。', step02Num: 'STEP 02 / 恶意授权', step02Title: '诱骗签署 Approve', step02Desc: '钓鱼页弹出伪装成「领取奖励」「验证身份」的签名请求，实质是 USDT 无限额度授权（Approve）。一旦确认，钱包内对应资产的控制权即被拱手让人。', step03Num: 'STEP 03 / 秒级转移', step03Title: '资产瞬间清空', step03Desc: '攻击合约凭借已获得的授权发起转账，数秒内将钱包内 USDT 全部转走，并经多层地址快速分散。链上交易不可撤销，资金极难追回。', tipsTitle: '安全防护建议', tip01: '不点击来源不明的链接与二维码，认准官方域名，仔细辨别「高仿」网址。', tip02: '签名前逐字核对授权内容，凡是索要「无限额度授权」的请求一律拒绝。', tip03: '定期检查钱包授权记录，及时取消（Revoke）闲置或可疑的代币授权。', tip04: '大额资产使用硬件钱包或多签钱包冷存储，与日常使用的热钱包隔离。', tip05: '任何官方客服都不会索要助记词、私钥或短信验证码，主动索要的均为骗子。', tip06: '大额转账前先进行小额测试，确认收款地址无误后再执行完整转账。', footer01: '本页面仅用于链上安全教育与风险提示，不构成任何投资建议。', footer02: '⚠️ 链上转账不可逆，请时刻保持警惕，谨防钓鱼与恶意授权。' }, en: { _docTitle: 'Warning: How USDT & Crypto Get Stolen in Seconds', badge: '⚠️ ON-CHAIN SECURITY ALERT', h1Prefix: 'Hacker’s view: how ', h1Em: 'USDT & crypto assets', h1Suffix: ' get drained in seconds', subtitle: 'Exposing the hidden attack chain to raise on-chain security awareness', videoTitle: 'Real Crypto-Theft Cases: The People Behind Them', videoUnsupported: 'Your browser does not support HTML5 video.', videoCaption: 'Real cases from prosecutorial & media reports · anonymized silhouette reenactment · for security education', stepsTitle: 'The Theft Chain in Three Steps', step01Num: 'STEP 01 / PHISHING', step01Title: 'Fake Links & QR Codes', step01Desc: 'Attackers impersonate official airdrops, promotions or “wallet security checks”, spreading look-alike links and QR codes via groups, SMS and DMs to lure victims into high-fidelity phishing sites.', step02Num: 'STEP 02 / MALICIOUS APPROVAL', step02Title: 'Tricked into Signing Approve', step02Desc: 'The phishing page disguises a signature request as “claim reward” or “verify identity”, but it is actually an unlimited USDT allowance (Approve). Once confirmed, control of those assets is handed over.', step03Num: 'STEP 03 / INSTANT DRAIN', step03Title: 'Assets Wiped Out', step03Desc: 'Using the granted approval, the attack contract transfers the entire USDT balance within seconds and splits it across layers of addresses. On-chain transactions are irreversible and funds are rarely recovered.', tipsTitle: 'Security Protection Tips', tip01: 'Never click links or QR codes from unknown sources; verify the official domain and watch for look-alike URLs.', tip02: 'Read every approval word by word before signing; reject any request for an “unlimited allowance”.', tip03: 'Review wallet approvals regularly and revoke idle or suspicious token allowances promptly.', tip04: 'Keep large holdings in a hardware or multi-sig cold wallet, isolated from your daily hot wallet.', tip05: 'No real support agent will ever ask for your seed phrase, private key or SMS codes — anyone who does is a scammer.', tip06: 'Send a small test transfer first; confirm the receiving address before sending the full amount.', footer01: 'This page is for on-chain security education and risk awareness only and is not investment advice.', footer02: '⚠️ On-chain transfers are irreversible. Stay alert against phishing and malicious approvals.' } }; function detectLang() { try { var saved = localStorage.getItem(I18N_STORAGE_KEY); if (saved === 'zh' || saved === 'en') return saved; } catch (e) { /* localStorage 不可用时退回自动检测 */ } var navLang = (navigator.language || navigator.userLanguage || 'zh').toLowerCase(); return navLang.indexOf('zh') === 0 ? 'zh' : 'en'; } function applyLang(lang) { if (!I18N[lang]) lang = 'zh'; var dict = I18N[lang]; document.documentElement.lang = lang === 'zh' ? 'zh-CN' : 'en'; document.title = dict._docTitle; var nodes = document.querySelectorAll('[data-i18n]'); for (var i = 0; i < nodes.length; i++) { var key = nodes[i].getAttribute('data-i18n'); if (dict[key] !== undefined) nodes[i].textContent = dict[key]; } var buttons = document.querySelectorAll('.lang-btn'); for (var j = 0; j < buttons.length; j++) { var isActive = buttons[j].getAttribute('data-lang') === lang; buttons[j].classList.toggle('active', isActive); buttons[j].setAttribute('aria-pressed', isActive ? 'true' : 'false'); } try { localStorage.setItem(I18N_STORAGE_KEY, lang); } catch (e) { /* 忽略写入失败 */ } } (function initI18n() { var current = detectLang(); applyLang(current); var buttons = document.querySelectorAll('.lang-btn'); for (var i = 0; i < buttons.length; i++) { buttons[i].addEventListener('click', function () { applyLang(this.getAttribute('data-lang')); }); } })(); /* ============================================================ * 终端打字机动效：循环输出威胁监测日志（英文命令风，语言无关） * ========================================================== */ (function () { var el = document.getElementById('terminal-log'); if (!el) return; var lines = [ '> INITIALIZING CYBER THREAT MONITOR...', '> LOADING THREAT INTELLIGENCE DATABASE ......... OK', '> SCANNING MEMPOOL FOR SUSPICIOUS APPROVALS ...', '> [ALERT] MALICIOUS USDT "Approve" DETECTED :: 12,400 USDT AT RISK', '> TRACING DESTINATION 0x7f3a...9aE3 :: MIXER PATTERN MATCHED', '> [DONE] REPORT GENERATED — VERIFY BEFORE YOU SIGN' ]; var lineIndex = 0; var charIndex = 0; var visibleLines = []; var MAX_VISIBLE = 4; function tick() { var currentLine = lines[lineIndex]; if (charIndex <= currentLine.length) { el.textContent = visibleLines.concat(currentLine.slice(0, charIndex)).join('\n'); charIndex++; setTimeout(tick, 22 + Math.random() * 42); return; } visibleLines.push(currentLine); if (visibleLines.length > MAX_VISIBLE) visibleLines.shift(); lineIndex++; charIndex = 0; if (lineIndex >= lines.length) { setTimeout(function () { lineIndex = 0; visibleLines = []; tick(); }, 4200); } else { setTimeout(tick, 380); } } tick(); })(); </script> </body> </html>