Tag: malicious extension

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Solidity Language open-source package was used in a $500,000 crypto heist

A blockchain developer in Russia lost $500,000 in crypto assets due to a malicious Solidity Language extension for Cursor AI IDE. The fake extension, downloaded 54,000 times, appeared higher in search results than the legitimate one due to ranking algorithms. It installed malware that allowed remot…
screenconnect
cryptocurrency
data theft
developers
open-source
quasar
blockchain
2025-07-11
heur:trojan-psw.msil.purelogs.gen
vmdetector
solidity
cursor ai
malicious extension
2025-07-16
Published: July 16, 2025
Linked vulnerabilities : CVE-2024-3721
Downloadable IOCs: 0
Click here to see more Attack Reports