Search all coverage

Threat actor

REF8801

Tracked by CyberSIXT since Oct 19, 2026 · last activity Oct 19, 2026

Coverage timeline

Fake Web3 Accelerator Plants Data Stealers in Malicious npm Packages
thehackernews.com · Oct 19, 2026