logo

Betting Trojan Disguises Stolen Round Results as Legitimate Seq Logging Traffic

ID: be44395f-152f-5119-b974-2b8a4deb11d3

STIX ID: report--be44395f-152f-5119-b974-2b8a4deb11d3

Feed Name: Cyber Press

Threat Score
70/100

Date Published: 2026-07-22

Date Updated: 2026-07-22

Author: Varshini

...
...

A malicious NuGet typosquat (Newtonsoftt.Json.Net) impersonated Json.NET while shipping a trojanized JSON assembly, a payload DLL, and Harmony to runtime‑patch Digitain’s crash‑game result generator. The trojan hooks GenerateGameResult to deterministically manipulate or overwrite round outcomes on a schedule and exfiltrates those results via requests that mimic Seq logging, enabling stealthy financial fraud; JFrog responsibly disclosed the package and Digitain confirmed mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.