Slow Mist Discovers Fake Qwen Model GitHub Repository
The Slow Mist security team recently discovered a malicious GitHub repository impersonating the "Qwen 3.8 27B Local Quantitative Model." The repository claims that the model files exceed 16GB, but the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Mist emphasizes that the official Qwen project has not been compromised. Once executed, the malicious program collects host information, takes screenshots, and sends them to the attacker's C2 server; when the hardcoded server fails, it will read a backup C2 address from contracts on the Polygon chain. Subsequent payloads can steal browser login information, cookies, history, emails, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Mist also found at least 23 GitHub repositories and 29 similar compressed packages using the same Lua delivery chain.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Anthropic Introduces Context Lock for Claude to Prevent Model Distillation

Arthur Hayes Launches AI Agent Chat Service Technocore.chat

Shopify CEO Tobi Lütke Considers Disabling Claude Code

Doubao Work Launched, an AI Agent for Business

Token Usage of AI Agents Increases 14-Fold Since February

Reddit Tests Audio and Video Post Experience

Former OpenAI Researcher Joins Conduit to Develop Non-Invasive Brain-Computer Interface

ByteDance Launches SeedRealtime, Doubao App Adds Real-Time Visual Capabilities

Samsung Launches BV-NAND Technology with 58% Increased Storage Density

Funeral of Franco Baresi in Milan, Milan legends present

Gemini Launches Global Voice Input Feature for Mac

FIFA investigates Argentina national team for Falklands flag at 2026 World Cup semifinals

Michael Saylor Recommends 38 Books to Understand Bitcoin and the History of Civilization

Polymarket cracks down on insider trading

The European SIX Group collaborates with Chainlink to bring Swiss and Spanish stock market data on-chain

The proposal text for U.S. stablecoin yields will be reviewed by a group from the banking and cryptocurrency industries from April 2 to 3

CZ: The personal memoir "Freedom of Money" is about to be published

Zamanat Targets GCC’s $250 Billion SME Financing Gap With Up to $100 Million Tokenized Private Credit Fund

CoinFactory Founder Rasoul Rezvani Unveils the Vision Behind RZ Oasis

What You Thought Was a Safe Compliance Check Actually Handed Your Assets to Hackers

When Bitcoin's Unsolved Mystery Meets a New Meme

DEEPCOIN Completes System Penetration Testing with HackenProof to Strengthen Asset Security

In the 17th Year of the Crypto Era, Where is Solana's Path to Survival?

Oil Crisis: 5 Reasons Why the Surge Won't Stop

SEC Reveals Progress on Key Measures to Drive Quality in Thailand's Investment Market

Real Review of World.xyz: Millisecond Trading and Betting Against Market Makers

Trump's Poll Numbers Decline, Bond Market Out of Control: Is Walsh's Independent Space Opening Up?

ESMA Warns of Growing Links Between Crypto and Finance

How to Calculate Bitcoin Profit for Beginners Easily - Fintech World
![[Full Text] Solana Foundation: "Korean STOs Should Start Within Regulations and Expand Globally"](/public-static/10_5acc261b9b.png?format=avif)






