TechFlow reported that multiple members of the crypto community have reported stolen private keys, with speculation pointing to the use of BitPrint Browser. In response, BitPrint Browser's official team stated in a community announcement that certain versions of WPS For Windows contain a remote code execution vulnerability. Attackers could exploit this vulnerability to execute arbitrary code on the victim's device and gain full control. Affected versions include WPS Office 2023 Personal Edition prior to 12.1.0.15120 (inclusive), and WPS Office institutional editions (such as Professional and Professional Plus) prior to 11.8.2.12055 (inclusive). The vulnerability is relatively easy to trigger, meaning users may be compromised simply by clicking on malicious links—even if private keys are not stored within WPS, using other applications does not prevent infection. Additionally, authorizing third parties with access to keys also poses a risk of theft.
