Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
News Source : Internet
News Summary
- A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems.
- The scheme poses as a Web3 venture capital accelerator named Apex Accelerator to target cryptocurrency startups and founders.
- It's unclear who is behind the operation, but Elastic Security Labs said it spotted Russian-language comments in the source code commit history.
- The operation also repackaged a legitimate coding agent to send model requests through attacker-controlled services, while its audit tools generated fabricated security findings.
Never miss a story from us, subscribe to our newsletter