Betting Trojan Disguises Stolen Round Results as Legitimate Seq Logging Traffic
ID: be44395f-152f-5119-b974-2b8a4deb11d3
STIX ID: report--be44395f-152f-5119-b974-2b8a4deb11d3
Feed Name: Cyber Press
Threat Score
A malicious NuGet typosquat (Newtonsoftt.Json.Net) impersonated Json.NET while shipping a trojanized JSON assembly, a payload DLL, and Harmony to runtime‑patch Digitain’s crash‑game result generator. The trojan hooks GenerateGameResult to deterministically manipulate or overwrite round outcomes on a schedule and exfiltrates those results via requests that mimic Seq logging, enabling stealthy financial fraud; JFrog responsibly disclosed the package and Digitain confirmed mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
