A malicious SDK called "SparkCat" has been discovered targeting cryptocurrency users through compromised Android and iOS apps. The campaign, affecting 28 apps with over 242,000 downloads, uses OCR technology to steal crypto wallet recovery phrases from device images. This marks the first d...
North Korean Lazarus Group launches sophisticated malware campaign targeting job seekers through fake LinkedIn recruitment for cryptocurrency and travel positions. The multi-platform attack affects Windows, macOS, and Linux systems, using fake DEX project repositories to deploy malware inc...
A sophisticated malware campaign called SparkCat is targeting cryptocurrency users through fake apps on official app stores, using OCR technology to steal wallet recovery phrases from photos. With over 242,000 downloads on Google Play Store, the malware masquerades as legitimate AI and Web...
CoinLurker, a sophisticated new malware written in Go, targets cryptocurrency users through fake software updates. Using advanced obfuscation and Microsoft Edge Webview2, it exploits various attack vectors including compromised WordPress sites and malvertising to steal crypto wallets, mess...
A sophisticated scam campaign dubbed "Meeten" targets Web3 professionals using fake video conferencing apps to distribute the Realst information stealer. Attackers create AI-enhanced fake companies, initiate contact via Telegram, and direct victims to fraudulent meeting platforms. The malw...
