SlowMist Warns of GitHub Project Targeting Crypto Wallet Data
Photo: TokenPost
SlowMist warned that a GitHub project named sol-live can run hidden malware targeting wallet extensions and other sensitive data, putting developers who manually start its configured terminal at risk. The repository presents itself as a Solidity interview-practice project. Its malicious command is concealed in a VS Code workspace settings file, .vscode/settings.json, and requires a user to start a particular terminal configuration to trigger the attack. The listed targets include browser login data, wallet-extension information and macOS Keychain files. The malware can also upload local files, run commands remotely and monitor clipboard contents.
Source: TokenPost
