Synthèse
> be me > get message from TorGuard owner > "i found goop" (malware) > wtf let me see goop (malware) > sends link > look inside > "width-table v0.1.0" > malicious rust crate > imported into "Polymarket-5min-bot" > by "crazygirl437" on GitHub > code walks directory and uploads files to website > "checkenv(.)cloud" > lol its for a rust crate that sets a table width > image 1 > neat > hmmmm > beep boop search > find X posts > malware campaign on X > verified accounts sending link to people > "crazygirl437/hyper-grid" > image 2 > more verified accounts posting stuff > lots of impressions and likes > image 3 Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4). Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer. tl;dr free goop for everyone
> be me > get message from TorGuard owner > "i found goop" (malware) > wtf let me see goop (malware) > sends link > look inside > "width-table v0. 1. 0" > malicious rust crate > imported into "Polymarket-5min-bot" > by "crazygirl437" on GitHub > code walks directory and uploads files to website > "checkenv(. )cloud" > lol its for a rust crate that sets a table width > image 1 > neat > hmmmm > beep boop search > find X posts > malware campaign on X > verified accounts sending link to people > "crazygirl437/hyper-grid" > image 2 > more verified accounts posting stuff > lots of impressions and likes > image 3 Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4). Although, it is primarily social engineering work.
It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer.
Source originale
t.me