SlowMist Exposes Malicious GitHub Project Disguised as Solidity Interview Questions to Steal Data

SlowMist has issued a security alert after receiving user reports about a GitHub repository named sol-live that masquerades as a Solidity interview practice project, concealing malicious code. This malicious payload consists of three main modules capable of collecting browser login databases and wallet extension storage data, copying macOS keychain files, scanning and uploading local files, executing remote commands, providing interactive shell access, and monitoring clipboard content. The attack on macOS and Linux systems requires users to actively initiate the malicious terminal configuration, while the attack chain on Windows systems has yet to be confirmed. Additionally, SlowMist has discovered eight other GitHub projects employing similar terminal download and execution techniques.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.