Slow Mist Discovers Fake Qwen Model GitHub Repository
The Slow Mist security team recently discovered a malicious GitHub repository impersonating the "Qwen 3.8 27B Local Quantitative Model." The repository claims that the model files exceed 16GB, but the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Mist emphasizes that the official Qwen project has not been compromised. Once executed, the malicious program collects host information, takes screenshots, and sends them to the attacker's C2 server; when the hardcoded server fails, it will read a backup C2 address from contracts on the Polygon chain. Subsequent payloads can steal browser login information, cookies, history, emails, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Mist also found at least 23 GitHub repositories and 29 similar compressed packages using the same Lua delivery chain.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Anthropic Introduces Context Lock for Claude to Prevent Model Distillation

Arthur Hayes Launches AI Agent Chat Service Technocore.chat

Shopify CEO Tobi Lütke Considers Disabling Claude Code

Doubao Work Launched, an AI Agent for Business

Token Usage of AI Agents Increases 14-Fold Since February

Reddit Tests Audio and Video Post Experience

Former OpenAI Researcher Joins Conduit to Develop Non-Invasive Brain-Computer Interface

ByteDance Launches SeedRealtime, Doubao App Adds Real-Time Visual Capabilities

Samsung Launches BV-NAND Technology with 58% Increased Storage Density

Funeral of Franco Baresi in Milan, Milan legends present

Gemini Launches Global Voice Input Feature for Mac

FIFA investigates Argentina national team for Falklands flag at 2026 World Cup semifinals

Michael Saylor Recommends 38 Books to Understand Bitcoin and the History of Civilization

Polymarket cracks down on insider trading

The European SIX Group collaborates with Chainlink to bring Swiss and Spanish stock market data on-chain

The proposal text for U.S. stablecoin yields will be reviewed by a group from the banking and cryptocurrency industries from April 2 to 3

CZ: The personal memoir "Freedom of Money" is about to be published

x402 Since Launch: 150 Million Transactions, Settlement Amounts, and a Review of Real-World Use Cases

Nonfarm Payrolls Preview Before Friday: How Will the Fed Choose Between Cooling Employment and Rising Inflation?

Countdown to Arc Mainnet: Where Will the First Batch of Traffic Flow?

London Stock Exchange Partners with Payward to Tokenize 100 UK Stocks

No Matter Whether Warsh Raises Rates or Not, He is Definitely One of Us

Despite Cryptocurrency Gains, Shareholders Remain Unsmiling: Kaiko Research Diagnoses Structural Limitations of DAT

Cornell University Survey: 90% Awareness of Bitcoin but Only 13% Understanding; Japan Reports Highest 'Difficult to Understand' Responses Among 25 Countries

What is short selling? The trading minute

Wall Street Morning Brief: U.S. Treasury Sell-off Pauses, U.S. Stocks Rise, Software Stocks and Japanese Bond Auction Hide Concerns

Rain contract exploit drains $1.1M from card users

Bitcoin Could Reach $250,000 to $840,000 Within Five Years, River's Fund Flow Model Estimates

MUFG and Progmat Begin Proof-of-Concept for Tokenized Investment Trusts in Real Environment









