Channel
@quanxiaowa
On this record: Topic · Growth · Engagement · Posts · Cite this entry
469subscribers
+24 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
| Telegram ID | -1001785643454 |
|---|---|
| Type | Channel |
| Username | @quanxiaowa |
| Created | Between 1 December 2021 and 30 April 2023 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 8 August 2026 |
| Last confirmed live | 3 October 2026 |
| Measurements held | 8 |
| Confirmed unchanged | 1 time, most recently 3 October 2026 |
| On Telegram | t.me/quanxiaowa |
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 21 September 2026 and assigned it the closest of 31 fixed categories, at 92% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and why it has no browse page of its own yet.
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 3 Oct 2026, 15:01 | 469 | +2 |
| 17 Sept 2026, 21:01 | 467 | +5 |
| 10 Sept 2026, 18:00 | 462 | +6 |
| 1 Sept 2026, 00:45 | 456 | +3 |
| 24 Aug 2026, 13:27 | 453 | +2 |
| 16 Aug 2026, 02:35 | 451 | +6 |
| 8 Aug 2026, 05:04 | 445 | no change |
| 7 Aug 2026, 23:09 | 445 | first reading |
20 posts held, back to 7 May 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 7 August 2026. An engagement rate over an empty window would be a number about nothing.
朝鲜黑客入侵中国手机厂商OPPO等千家机构，Black Hat黑帽大会曝光其入侵内幕 安全研究员万格利斯·斯蒂卡斯通过长达两年的卧底追踪，证实一个朝鲜国家背景的黑客组织已入侵全球57个国家的1600多个组织，受害者名单中赫然出现了中国手机巨头OPPO、加密钱包巨头Coinbase以及多个政府部门。黑客通过在招聘面试中诱导员工运行带毒测试代码，实现了对受害者企业内网的深度控制。 https://www.qxwa.com/oppo-coinbase-targeted-by-north-korean-hackers-via-fake-interviews.html
硬件钱包Coldcard曝致命随机数漏洞，黑客41分钟盗走1082枚比特币 著名的加密货币硬件钱包 Coldcard 制造商 Coinkite 承认，其固件中一个潜伏超五年的随机数生成器（RNG）漏洞遭到黑客利用。攻击者通过离线重构私钥的方式，在短短 41 分钟内从 1196 个休眠多年的地址中卷走了 1082.65 枚比特币。官方已紧急发布安全补丁，并敦促相关用户迁移资金。 https://www.qxwa.com/coldcard-hardware-wallet-firmware-flaw-bitcoin-heist.html
离岸“神卡”跌落神坛？giffgaff 疑似集中清退长期境外用户，多名中国大陆用户号码被封 giffgaff 官方在发送给受影响用户的邮件中明确指出，经过后台数据审计，系统发现这些号码存在长期或永久在英国境外运行的记录。基于服务条款中关于公平使用原则以及对本地居民服务的初衷，官方决定直接终止这些账号的移动通信服务。 https://www.qxwa.com/giffgaff-suspends-overseas-users-long-term-roaming.html
韩国监管重拳出击：Google Play下架至少29家海外加密货币交易所App，OKX、Bybit等巨头在列 一项最新媒体调查显示，CoinMarketCap 排名前 50 的海外衍生品交易所中，至少有 29 家的应用程序已被韩国 Google Play 商店强制下架，受影响的包括 OKX、Bybit、MEXC 及 Backpack 等知名平台，预示着当地加密市场正迎来强力洗牌。 https://www.qxwa.com/south-korea-google-play-removes-29-crypto-exchange-apps.html
波及全球超5亿网站！WordPress核心曝出零日RCE漏洞“wp2shell” 该漏洞允许攻击者在无需账户密码及插件配合的情况下，对原生 WordPress 网站直接实施接管。由于受影响版本广泛，安全专家呼吁网站管理员应立即更新系统，或通过 WAF 限制相关 API 路由。 https://www.qxwa.com/wordpress-core-rce-vulnerability-wp2shell.html
币圈炸锅！Coinbase悄然放宽中国大陆用户注册门槛：支持身份证与大陆地址KYC认证 中国大陆用户现在可以直接使用居民身份证和大陆居住地址完成实名认证，告别了此前必须提供护照和境外地址的严苛限制。此举刺激 Coinbase 股价盘中上涨超 2%，但分析指出，注册门槛降低并不等同于交易功能的解封。 https://www.qxwa.com/coinbase-reportedly-opens-easier-access-china-kyc.html
Grok Build编码工具被曝打包上传完整代码库与历史密钥，马斯克紧急承诺销毁 该命令行工具在未告知用户的情况下，将整个本地代码仓库打包并静默上传至谷歌云服务器，泄露内容甚至包含了用户已在历史记录中清除的加密密钥。面对开发者的声讨，埃隆·马斯克紧急出面降温，承诺将彻底销毁所有已上传的数据。 https://www.qxwa.com/grok-build-uploaded-entire-codebase-secrets-leak-scandal.html
致命的通信漏洞：伊朗利用SS7信令缺陷定位美军，并发动多起袭击 多名政府知情官员及移动监控机构的最新研究披露，伊朗政府在近年冲突期间，滥用全球移动通信骨干网中的七号信令系统（SS7）漏洞，成功锁定了驻扎在伊拉克、巴林等中东国家的美军官兵位置。这一关键定位数据直接促成了随后的袭击行动，并导致数名美军人员受伤。 https://www.qxwa.com/iran-tracked-us-military-via-ss7-vulnerability.html
美国“勒索软件谈判代表”合谋黑客敲诈企业，被判处五年监禁 美国司法部确认，佛罗里达州一名曾担任专业“勒索软件谈判代表”的男子安吉洛·马蒂诺，因在职期间与黑客里应外合部署BlackCat勒索软件并敲诈受害企业，被正式判处五年以上监禁。此案目前已追缴超1000万美元的加密资产及游艇。 https://www.qxwa.com/us-ransomware-negotiator-convicted-blackcat-extortion.html
Windows设备标识符被用于识别勒索软件组织核心成员 法庭解密文件首次披露，微软通过提供 Windows 操作系统的“全球设备标识符（GDID）”及包含 Ngrok 工具使用痕迹的遥测数据，成为了警方撕开其匿名面纱的关键突破口。 https://www.qxwa.com/windows-telemetry-gdid-leads-to-scattered-spider-hacker-arrest.html
以黑制黑：加拿大间谍机构罕见承认针对境外实体实施三次反向黑客入侵 该机构通过主动反向入侵黑客和跨国犯罪分子的服务器，成功瓦解了一个处于活跃状态的勒索软件即服务（RaaS）平台，并切断了加拿大境外芬太尼化学原料中介的网络供应链。 https://www.qxwa.com/canadian-cse-hacked-foreign-drug-traffickers-ransomware-gang.html
Polymarket遭遇供应链袭击：黑客向官网植入恶意代码，部分用户资金失窃 全球最大的去中心化预测市场平台 Polymarket 证实，因其第三方供应商系统被黑客攻破，导致平台官网被注入了恶意代码，部分用户的加密资金因此被盗。该公司表示目前攻击已被成功遏制，并将为所有受害用户提供全额退款。不过，官方尚未披露受损的资金总额及受影响的具体用户规模。 https://www.qxwa.com/polymarket-compromised-malicious-code-user-funds-stolen.html
Showing the 12 most recent of 20 posts we hold for @quanxiaowa. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 3 October 2026 — this entry's latest reading, not the date you are reading this.
“圈小蛙 qxwa.com” (@quanxiaowa), 469 subscribers as measured 3 October 2026. Telegram Register, tgregister.com/channel/quanxiaowa.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.