Skip to content

MALICIOUS (1) campaign cataloged at 2025-07-10(2).

  1. The campaign has clearly malicious intent, like infostealers.
  2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2025-07-web3toolkit-base

Code monitors the clipboard and when detects a cryptocurrency wallet, attempts to overwrite it with the own address.

Abuse categories

clipboard_modify

Campaign uses clipboard_modify.

crypto-related

Campaign uses crypto-related.

obfuscation

Campaign uses obfuscation.

Packages in the campaign

campaign:2025-07-web3toolkit-base