Slow Mist Discovers Fake Qwen Model GitHub Repository
The Slow Mist security team recently discovered a malicious GitHub repository impersonating the "Qwen 3.8 27B Local Quantitative Model." The repository claims that the model files exceed 16GB, but the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Mist emphasizes that the official Qwen project has not been compromised. Once executed, the malicious program collects host information, takes screenshots, and sends them to the attacker's C2 server; when the hardcoded server fails, it will read a backup C2 address from contracts on the Polygon chain. Subsequent payloads can steal browser login information, cookies, history, emails, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Mist also found at least 23 GitHub repositories and 29 similar compressed packages using the same Lua delivery chain.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Arthur Hayes Launches AI Agent Chat Service Technocore.chat

Shopify CEO Tobi Lütke Considers Disabling Claude Code

Doubao Work Launched, an AI Agent for Business

Token Usage of AI Agents Increases 14-Fold Since February

Reddit Tests Audio and Video Post Experience

Former OpenAI Researcher Joins Conduit to Develop Non-Invasive Brain-Computer Interface

ByteDance Launches SeedRealtime, Doubao App Adds Real-Time Visual Capabilities

Samsung Launches BV-NAND Technology with 58% Increased Storage Density

Funeral of Franco Baresi in Milan, Milan legends present

Gemini Launches Global Voice Input Feature for Mac

FIFA investigates Argentina national team for Falklands flag at 2026 World Cup semifinals

Michael Saylor Recommends 38 Books to Understand Bitcoin and the History of Civilization

Polymarket cracks down on insider trading

The European SIX Group collaborates with Chainlink to bring Swiss and Spanish stock market data on-chain

The proposal text for U.S. stablecoin yields will be reviewed by a group from the banking and cryptocurrency industries from April 2 to 3

CZ: The personal memoir "Freedom of Money" is about to be published

A Practical Guide to FOMO: How to Find People and Coins in Social Trading?

Alpaca Partners with Kalshi to Add Prediction Markets to Its Stock and Cryptocurrency Infrastructure

Crypto May Be in a Very Good Selective Buying Window

Park Young-sun: "The Second Act of the AI Economy Begins... Agents, Stablecoins, and Physical AI"

Cronos restarts network after emergency halt over Tectonic exploit

NOT A HOTEL Announces Collaboration with Pokémon

Ripple unlocks 1B XRP as escrow falls to 31.28B

Latest Non-Farm Payroll Forecast: Job Growth May Slow, Fed Faces Complex Choices

$40 Trillion U.S. Debt Alarm Sounds, BlackRock Unexpectedly Bullish on Bitcoin and Gold

Russia opens regulated crypto trading as new law takes effect

What is liquidation? The trading minute

Crypto: The Clarity Act has only a 13% chance of being adopted

Digital Day: What Professions Are Lacking in the Crypto Market and Where to Acquire Them






