Tag: Phishing campaign

Researchers at JFrog Security disclosed on March 9, 2026, a malicious npm package impersonating the Openclaw AI framework that infected approximately 178 developer machines with the Ghostloader remote access trojan. ...

A legitimate Chrome extension trusted by thousands of crypto users was hijacked in February 2026 to distribute malware targeting MetaMask, Phantom, and Coinbase Wallet. The attackers embedded code that harvests ...

A wave of X account takeover attacks is sweeping through the crypto community, using convincing phishing techniques that bypass traditional two-factor authentication (2FA). Security researchers warn the campaign is live, ...