The Christmas Heist: How Shai-Hulud Hijacked Trust Wallet for an $8.5M Score
ID: b2c9b1d4-7b17-526f-a80b-e856fbd018df
STIX ID: report--b2c9b1d4-7b17-526f-a80b-e856fbd018df
Feed Name: securityonline.info
Threat Score
Trust Wallet's Chrome extension was compromised after an NPM supply-chain attack by the group Shai-Hulud exposed developers' GitHub credentials and Google Chrome Web Store API keys; attackers recompiled and published a backdoored extension that harvested seed phrases, resulting in roughly $8.5M stolen before mitigation and reimbursement by Binance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.