Connect with us

Uncategorized

Hackers Are Using Fake GitHub Code to Steal Your Bitcoin: Kaspersky

Published

on

The GitHub code you use to build a trendy application or patch existing bugs might just be used to steal your bitcoin (BTC) or other crypto holdings, according to a Kaspersky report.

GitHub is popular tool among developers of all types, but even more so among crypto-focused projects, where a simple application may generate millions of dollars in revenue.

The report warned users of a “GitVenom” campaign that’s been active for at least two years but is steadily on the rise, involving planting malicious code in fake projects on the popular code repository platform.

The attack starts with seemingly legitimate GitHub projects — like making Telegram bots for managing bitcoin wallets or tools for computer games.

Each comes with a polished README file, often AI-generated, to build trust. But the code itself is a Trojan horse: For Python-based projects, attackers hide nefarious script after a bizarre string of 2,000 tabs, which decrypts and executes a malicious payload.

For JavaScript, a rogue function is embedded in the main file, triggering the launch attack. Once activated, the malware pulls additional tools from a separate hacker-controlled GitHub repository.

(A tab organizes code, making it readable by aligning lines. The payload is the core part of a program that does the actual work — or harm, in malware’s case.)

Once the system is infected, various other programs kick in to execute the exploit. A Node.js stealer harvests passwords, crypto wallet details, and browsing history, then bundles and sends them via Telegram. Remote access trojans like AsyncRAT and Quasar take over the victim’s device, logging keystrokes and capturing screenshots.

A “clipper” also swaps copied wallet addresses with the hackers’ own, redirecting funds. One such wallet netted 5 BTC — worth $485,000 at the time — in November alone.

Active for at least two years, GitVenom has hit users hardest in Russia, Brazil, and Turkey, though its reach is global, per Kaspersky.

The attackers keep it stealthy by mimicking active development and varying their coding tactics to evade antivirus software.

How can users protect themselves? By scrutinizing any code before running it, verifying the project’s authenticity, and being suspicious of overly polished READMEs or inconsistent commit histories.

Because researchers don’t expect these attacks to stop anytime soon: “We expect these attempts to continue in the future, possibly with small changes in the TTPs,” Kaspersky concluded in its post.

Continue Reading
Click to comment

Leave a Reply

Ваш адрес email не будет опубликован. Обязательные поля помечены *

Uncategorized

Wall Street Bank Citigroup Sees Ether Falling to $4,300 by Year-End

Published

on

By

Wall Street giant Citigroup (C) has launched new ether (ETH) forecasts, calling for $4,300 by year-end, which would be a decline from the current $4,515.

That’s the base case though. The bank’s full assessment is wide enough to drive an army regiment through, with the bull case being $6,400 and the bear case $2,200.

The bank analysts said network activity remains the key driver of ether’s value, but much of the recent growth has been on layer-2s, where value “pass-through” to Ethereum’s base layer is unclear.

Citi assumes just 30% of layer-2 activity contributes to ether’s valuation, putting current prices above its activity-based model, likely due to strong inflows and excitement around tokenization and stablecoins.

A layer 1 network is the base layer, or the underlying infrastructure of a blockchain. Layer 2 refers to a set of off-chain systems or separate blockchains built on top of layer 1s.

Exchange-traded fund (ETF) flows, though smaller than bitcoin’s (BTC), have a bigger price impact per dollar, but Citi expects them to remain limited given ether’s smaller market cap and lower visibility with new investors.

Macro factors are seen adding only modest support. With equities already near the bank’s S&P 500 6,600 target, the analysts do not expect major upside from risk assets.

Read more: Ether Bigger Beneficiary of Digital Asset Treasuries Than Bitcoin or Solana: StanChart

Continue Reading

Uncategorized

XLM Sees Heavy Volatility as Institutional Selling Weighs on Price

Published

on

By

Stellar’s XLM token endured sharp swings over the past 24 hours, tumbling 3% as institutional selling pressure dominated order books. The asset declined from $0.39 to $0.38 between September 14 at 15:00 and September 15 at 14:00, with trading volumes peaking at 101.32 million—nearly triple its 24-hour average. The heaviest liquidation struck during the morning hours of September 15, when XLM collapsed from $0.395 to $0.376 within two hours, establishing $0.395 as firm resistance while tentative support formed near $0.375.

Despite the broader downtrend, intraday action highlighted moments of resilience. From 13:15 to 14:14 on September 15, XLM staged a brief recovery, jumping from $0.378 to a session high of $0.383 before closing the hour at $0.380. Trading volume surged above 10 million units during this window, with 3.45 million changing hands in a single minute as bulls attempted to push past resistance. While sellers capped momentum, the consolidation zone around $0.380–$0.381 now represents a potential support base.

Market dynamics suggest distribution patterns consistent with institutional profit-taking. The persistent supply overhead has reinforced resistance at $0.395, where repeated rally attempts have failed, while the emergence of support near $0.375 reflects opportunistic buying during liquidation waves. For traders, the $0.375–$0.395 band has become the key battleground that will define near-term direction.

XLM/USD (TradingView)

Technical Indicators
  • XLM retreated 3% from $0.39 to $0.38 during the previous 24-hours from 14 September 15:00 to 15 September 14:00.
  • Trading volume peaked at 101.32 million during the 08:00 hour, nearly triple the 24-hour average of 24.47 million.
  • Strong resistance established around $0.395 level during morning selloff.
  • Key support emerged near $0.375 where buying interest materialized.
  • Price range of $0.019 representing 5% volatility between peak and trough.
  • Recovery attempts reached $0.383 by 13:00 before encountering selling pressure.
  • Consolidation pattern formed around $0.380-$0.381 zone suggesting new support level.

Disclaimer: Parts of this article were generated with the assistance from AI tools and reviewed by our editorial team to ensure accuracy and adherence to our standards. For more information, see CoinDesk’s full AI Policy.

Continue Reading

Uncategorized

HBAR Tumbles 5% as Institutional Investors Trigger Mass Selloff

Published

on

By

Hedera Hashgraph’s HBAR token endured steep losses over a volatile 24-hour window between September 14 and 15, falling 5% from $0.24 to $0.23. The token’s trading range expanded by $0.01 — a move often linked to outsized institutional activity — as heavy corporate selling overwhelmed support levels. The sharpest move came between 07:00 and 08:00 UTC on September 15, when concentrated liquidation drove prices lower after days of resistance around $0.24.

Institutional trading volumes surged during the session, with more than 126 million tokens changing hands on the morning of September 15 — nearly three times the norm for corporate flows. Market participants attributed the spike to portfolio rebalancing by large stakeholders, with enterprise adoption jitters and mounting regulatory scrutiny providing the backdrop for the selloff.

Recovery efforts briefly emerged during the final hour of trading, when corporate buyers tested the $0.24 level before retreating. Between 13:32 and 13:35 UTC, one accumulation push saw 2.47 million tokens deployed in an effort to establish a price floor. Still, buying momentum ultimately faltered, with HBAR settling back into support at $0.23.

The turbulence underscores the token’s vulnerability to institutional distribution events. Analysts point to the failed breakout above $0.24 as confirmation of fresh resistance, with $0.23 now serving as the critical support zone. The surge in volume suggests major corporate participants are repositioning ahead of regulatory shifts, leaving HBAR’s near-term outlook dependent on whether enterprise buyers can mount sustained defenses above key support.

HBAR/USD (TradingView)

Technical Indicators Summary
  • Corporate resistance levels crystallized at $0.24 where institutional selling pressure consistently overwhelmed enterprise buying interest across multiple trading sessions.
  • Institutional support structures emerged around $0.23 levels where corporate buying programs have systematically absorbed selling pressure from retail and smaller institutional participants.
  • The unprecedented trading volume surge to 126.38 million tokens during the 08:00 morning session reflects enterprise-scale distribution strategies that overwhelmed corporate demand across major trading platforms.
  • Subsequent institutional momentum proved unsustainable as systematic selling pressure resumed between 13:37-13:44, driving corporate participants back toward $0.23 support zones with sustained volumes exceeding 1 million tokens, indicating ongoing institutional distribution.
  • Final trading periods exhibited diminishing corporate activity with zero recorded volume between 13:13-14:14, suggesting institutional participants adopted defensive positioning strategies as HBAR consolidated at $0.23 amid enterprise uncertainty.

Disclaimer: Parts of this article were generated with the assistance from AI tools and reviewed by our editorial team to ensure accuracy and adherence to our standards. For more information, see CoinDesk’s full AI Policy.

Continue Reading

Trending

Copyright © 2017 Zox News Theme. Theme by MVP Themes, powered by WordPress.