Cybersecurity News
Filters
Filtered by tag: web3 × Clear
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
Matched: Artificial Intelligence, Claude, Gemini
A fake Web3 accelerator is luring developers with promises of free AI credits for Claude and Gemini, coding tools, and security audits, while distributing malicious npm packages. The packages deploy information-stealing malware and backdoors targeting both Windows and macOS systems, according to Elastic Security researchers.
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
Matched: cryptocurrency
Researchers found 40 malicious Firefox extensions disguised as Web3 products like OKX and Rabby Wallet that steal cryptocurrency wallet credentials. Dubbed "Offside Wallet Theft Factory" by Socket Threat Research, the extensions are part of a broader group of 77 add-ons sharing code and infrastructure. Users are advised to verify extensions carefully before installing.
Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT
Matched: cryptocurrency
Attackers posing as Web3 recruiters on LinkedIn lured cryptocurrency professionals into fake job interviews, ultimately tricking Windows users into installing malware via a signed ClickOnce application. The infection deployed NeedleStealer, which harvested private keys and browser data, alongside an hVNC remote access trojan. The campaign used Calendly scheduling and technical assessments to appear legitimate.