DeepSeek Phishing Sites Pursue User Data, Crypto Wallets
ID: 514644d2-3bba-5adc-b8bd-3e32129cc544
STIX ID: report--514644d2-3bba-5adc-b8bd-3e32129cc544
Feed Name: Dark Reading
Threat Score
Researchers observed a coordinated campaign exploiting DeepSeek's publicity by deploying dozens of phishing sites (at least 16 observed), fraudulent investment and cryptocurrency scams, and malicious PyPI packages labeled "deepseekai"/"deepseeek" that target developers; operators used dynamic branding, phish kits/PhaaS, and infrastructure shifts to evade takedowns, enabling credential theft, account takeover, malware distribution, and financial fraud.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.