Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

Image for article Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
News Source : Internet

News Summary

  • A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems.
  • The scheme poses as a Web3 venture capital accelerator named Apex Accelerator to target cryptocurrency startups and founders.
  • It's unclear who is behind the operation, but Elastic Security Labs said it spotted Russian-language comments in the source code commit history.
  • The operation also repackaged a legitimate coding agent to send model requests through attacker-controlled services, while its audit tools generated fabricated security findings.

Must read Articles