Tag: cryptocurrency targeting

2 Attack Reports | 0 Vulnerabilities

Attack reports

WebAssembly Malware Found in Trojanized Open VSX Extensions

Trojanized Visual Studio Code extensions distributed via the Open VSX marketplace deliver a sophisticated WebAssembly-based attack chain. The extensions ship ChaCha20-encrypted TinyGo-compiled WebAssembly modules that poll the Solana blockchain for command-and-control instructions embedded in trans…
supply chain
webassembly
cryptocurrency targeting
open vsx
2026-06-16
chacha20 encryption
dead-drop c2
glasswasm
solana blockchain
tinygo
vs code extensions
Published: June 16, 2026
Downloadable IOCs: 11

Fake recruiter campaign targets crypto developers with RAT

A sophisticated fake recruitment campaign named 'graphalgo' has been active since May 2025, targeting JavaScript and Python developers in the cryptocurrency sector. Attackers approach victims through LinkedIn, Facebook, and Reddit with fabricated job opportunities from fake blockchain companies lik…
north korea
supply chain attack
blockchain
2026-04-13
bigmathex
bigmathix
bigmathlib
bigmathutils
bignum
bignumberx
bignumex
bignumx
bigpyx
cryptocurrency targeting
fake recruitment
graphalgo
graphchain
graphdict
graphex
graphflowx
graphflux
graphhub
graphkitx
graphlibcore
graphlibx
graphlink
graphnet
graphnetworkx
graphnode
graphorbit
graphrix
graphsync
javascript developers
netstruct
npm packages
pypi packages
python developers
terminal-kleur
terminalcolor256
Published: April 13, 2026
Downloadable IOCs: 61
Click here to see more Attack Reports