Slow Mist Discovers Fake Qwen Model GitHub Repository
The Slow Mist security team recently discovered a malicious GitHub repository impersonating the "Qwen 3.8 27B Local Quantitative Model." The repository claims that the model files exceed 16GB, but the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Mist emphasizes that the official Qwen project has not been compromised. Once executed, the malicious program collects host information, takes screenshots, and sends them to the attacker's C2 server; when the hardcoded server fails, it will read a backup C2 address from contracts on the Polygon chain. Subsequent payloads can steal browser login information, cookies, history, emails, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Mist also found at least 23 GitHub repositories and 29 similar compressed packages using the same Lua delivery chain.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Anthropic Introduces Context Lock for Claude to Prevent Model Distillation

Arthur Hayes Launches AI Agent Chat Service Technocore.chat

Shopify CEO Tobi Lütke Considers Disabling Claude Code

Doubao Work Launched, an AI Agent for Business

Token Usage of AI Agents Increases 14-Fold Since February

Reddit Tests Audio and Video Post Experience

Former OpenAI Researcher Joins Conduit to Develop Non-Invasive Brain-Computer Interface

ByteDance Launches SeedRealtime, Doubao App Adds Real-Time Visual Capabilities

Samsung Launches BV-NAND Technology with 58% Increased Storage Density

Funeral of Franco Baresi in Milan, Milan legends present

Gemini Launches Global Voice Input Feature for Mac

FIFA investigates Argentina national team for Falklands flag at 2026 World Cup semifinals

Michael Saylor Recommends 38 Books to Understand Bitcoin and the History of Civilization

Polymarket cracks down on insider trading

The European SIX Group collaborates with Chainlink to bring Swiss and Spanish stock market data on-chain

The proposal text for U.S. stablecoin yields will be reviewed by a group from the banking and cryptocurrency industries from April 2 to 3

CZ: The personal memoir "Freedom of Money" is about to be published

Debate Over New ETF Regulations: Speed vs. Safety in the U.S. Cryptocurrency Industry

Ethereum, Solana, XRP, Dogecoin: This Japanese Company Sells Everything to Bet on Bitcoin

Solana Launches 'Payment Channels' for AI Payments, Competing with Ethereum's Next-Gen Infrastructure

Web3 Newsletter: Industry Highlights and Must-See Trends This Week

Weekly Highlights | The Meme Craze and Risks of Robinhood Coin Stocks Intertwined, Collective Release of AI Large Models

Cryptocurrency Fills the 900 Million Annual Fee Pit for Robots

Pentagon Investigates Whether COVID Vaccines Contributed to Military Deaths

New method allows tracking genetic activity of living cells without destroying them

Texas Opens 100 MW Battery Center to Strengthen U.S. Electric Grid

Trump Supports Ranchers After Allowing More Meat Imports

States must report irregular immigrants or risk welfare funds, warns DOJ

U.S. Government Asks Supreme Court to Activate New Mail-in Voting Rules












