Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic…

Malware novo costuma reaproveitar técnicas antigas. Os indicadores (hashes, domínios, comportamento) servem de pista para caçar no seu ambiente.

• Anote os indicadores de comprometimento citados.
• Pergunte: o EDR detectaria esse comportamento?
• Mapeie as técnicas no MITRE ATT&CK.