The Hacker NewsPublished
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
By The Hacker News
Excerpt
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits.
"The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic Security Labs researchers Jia Yu Chan and Daniel Stepanic said. "The operation also repackaged a legitimate coding agent to send model requests through a…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by The Hacker News on thehackernews.com.
Mentioned in the excerpt
More from The Hacker News5
- Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 CredentialsThe Hacker News · Published 23 Oct
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesThe Hacker News · Published 19 Oct
- Russian State-Sponsored Hackers Use Claude to Rebuild Malware After DetectionThe Hacker News · Published 11 Sep
- New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News · Published 21 Jul
On the same topics
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Trust the Tunnel, Get the Trojan: Silver Fox Delivers Atlas RAT via Weaponized VPN Installershexastrike.com · Published 25 Mar
- Attackers Target Agents via The Skill Supply Chainzenity.io · Published 6 Aug
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux ImplantTrend Micro · Added 2 Sep
