Slow Mist Discovers Fake Qwen Model GitHub Repository
The Slow Mist security team recently discovered a malicious GitHub repository impersonating the "Qwen 3.8 27B Local Quantitative Model." The repository claims that the model files exceed 16GB, but the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Mist emphasizes that the official Qwen project has not been compromised. Once executed, the malicious program collects host information, takes screenshots, and sends them to the attacker's C2 server; when the hardcoded server fails, it will read a backup C2 address from contracts on the Polygon chain. Subsequent payloads can steal browser login information, cookies, history, emails, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Mist also found at least 23 GitHub repositories and 29 similar compressed packages using the same Lua delivery chain.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Bitcoin ETFs: 2026 Flows Finally Return to Positive

Cosmos Hub Recovers 1.227 Million ATOM, Funds Stored in 4/6 Multisig Address

Federal Reserve Plans to Raise Regulatory Thresholds for Large Banks

INDODAX Highlights Strengthening of National Crypto Ecosystem at FEKDI x IFSE 2026 - Fintech World

Treasuries at 21-Year High: Impact on Stocks and Interest Rates

S&P 500 Closes Flat as 328 Stocks Decline

Fed proposes GENIUS Act rules for stablecoin reserves and bank issuers

xStocks adds Ledger hardware wallet support for tokenized shares

John Templeton: "Bull markets are born in pessimism"

Perpetuals on Gold, Oil, and Stocks: $117 Billion Traded in One Month

What Happens When the AI Bubble Bursts? MIT University Responds

IMF Calls for Fewer but Deeper Reforms to Address a More Vulnerable Global Economy

Meta's 'Muse' Sparks High Expectations... "An iPod Moment for AI" (Comprehensive)

大冰要抄底(专注交易) Price Prediction for October

Two men arrested for fraud with fake EURC

Mint launches connected Web3 gaming economy with MNTD rewards

Slow Fog: MemoryOS and OpenClaw Plugin Compromised

Nick Clegg's View on AI: The Real Risk is Power, Not Robots

135,694 Crypto-Millionaires, 92,272 Bitcoin-Millionaires in 2026

CFTC Chair Calls for "Mass Tokenization"! Wall Street Faces Three Barriers to Full On-Chain Adoption

AI: DeepSeek and Kimi Allegedly Redirected Queries to Claude Without Users' Knowledge

Citi Predicts Fed Will Keep Rates Unchanged in October and December, Resume Rate Cuts in June 2027

How to Rewrite Internet Rules When Everyone Has an Indefatigable Agent

Long.xyz Founder Emphasizes Asset Distribution and Scale Growth

PitchBook Predicts Kalshi Valuation Could Reach $42.1 Billion

FedNow readies cross-border support for U.S. banks





