⤷ Title: Socket Uncovers Malicious NuGet Typosquat “Netherеum.All” Exfiltrating Wallet Keys via Solana-Themed C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 00:35:05 +0000
════════════════════════
⌗ Tags: #Malware #.NET #crypto wallet theft #Homoglyph #Nethereum #NuGet #Supply Chain #Typosquatting #XOR Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 00:35:05 +0000
════════════════════════
⌗ Tags: #Malware #.NET #crypto wallet theft #Homoglyph #Nethereum #NuGet #Supply Chain #Typosquatting #XOR Obfuscation
Daily CyberSecurity
Socket Uncovers Malicious NuGet Typosquat “Netherеum.All” Exfiltrating Wallet Keys via Solana-Themed C2
A NuGet typosquat named Netherеum.All used a Cyrillic homoglyph to fool 11M+ downloads. The malicious package injected an XOR-decoded backdoor to steal crypto wallet and private key data.
⤷ Title: Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 00:26:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET #Blockchain security #Cryptocurrency Theft #Malicious packages #Nethereum.All #NuGet #ReversingLabs #supply chain attack #Typosquatting #Wallet drainer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 00:26:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET #Blockchain security #Cryptocurrency Theft #Malicious packages #Nethereum.All #NuGet #ReversingLabs #supply chain attack #Typosquatting #Wallet drainer
Daily CyberSecurity
Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers
ReversingLabs uncovered Nethereum.All, a malicious NuGet package with 10M+ fake downloads designed to drain crypto wallets and steal API secrets.