• Latest
  • All
  • Breaking
  • Announcements
  • Learn
  • Analysis
  • Current events
Hackers Are Using Fake GitHub Code to Steal Your Bitcoin: Kaspersky

Hackers Are Using Fake GitHub Code to Steal Your Bitcoin: Kaspersky

February 26, 2025

Binance Alpha 将在 8 月 15 日上线 TCOM Global (TCOM)

August 13, 2025
US prosecutors double down on 10-year sentence for HashFlare co-founders

US prosecutors double down on 10-year sentence for HashFlare co-founders

August 13, 2025

Grayscale launches two trusts linked to Sui ecosystem protocols

August 13, 2025

Ethereum dev detained in Turkey donates to Roman Storm’s defense fund

August 13, 2025

Crypto crime unit with $250M in seizures expands with Binance

August 13, 2025

Coinbase revives stablecoin bootstrap fund to boost USDC in DeFi

August 13, 2025

OpenEden taps BNY Mellon to manage tokenized US Treasury assets

August 13, 2025

HashFlare founders given time served for $577M crypto Ponzi

August 13, 2025

Ethereum whales scoop sales by traders in ‘disbelief’ of rally: Santiment

August 13, 2025

US takes down sites, seizes $1M from crypto ransomware gang BlackSuit

August 13, 2025

US prosecutors double down on 10-year sentence for HashFlare co-founders

August 13, 2025
SEC to focus on ‘clear’ crypto regulations after Ripple case: Atkins

SEC to focus on ‘clear’ crypto regulations after Ripple case: Atkins

August 12, 2025
Wednesday, August 13, 2025
8V Crypto Academy
8V Academy - 8V.com - Your Cryptocurrency Gateway
  • About 8V
    • 8V Exchange
    • 8V Blog
  • Market Beat
    • Today Real-time Market Data
    • Web3
    • Breaking
    • Tokens
    • Markets
    • Compliance
    • Exchanges
    • Tech
    • GameFi
    • NFT
    • Defi
    • Miscellaneous
  • Platform
    • 8V Announcements
    • Events
      • Current Events
      • Closed Events
    • Product
      • 8V Overview
      • Assets
      • Exchange
        • Spot Trading
        • Futures Trading
        • Leverage Trading
      • Copy Trading
      • Earn
        • Fixed
        • Flexible
      • Cryptocurrency Debit Card
      • Buy Crypto Instantly
      • Strategy Trading
    • Trading Fees and Limits
    • 8V Exchange API
    • Referral Scheme
    • Bug Bounty
    • FAQ
      • Account Functions
      • Deposits & Withdrawals
      • Others
  • Academy
    • How To Buy Crypto
    • Learning Centre
    • Analysis Center
    • Crypto Glossary
  • Business
    • Coin Listing Request
    • Crypto Trader Application
    • Partnerships
  • Policy
    • Privacy Policy
    • Service Agreement
    • Disclaimer
    • Compliance Notice
  • English
    • English
    • 中文 (台灣)
    • 中文 (中国)
  • Members
    • Login
    • Register
    • Activate
    • Add New Friends
No Result
View All Result
  • About 8V
    • 8V Exchange
    • 8V Blog
  • Market Beat
    • Today Real-time Market Data
    • Web3
    • Breaking
    • Tokens
    • Markets
    • Compliance
    • Exchanges
    • Tech
    • GameFi
    • NFT
    • Defi
    • Miscellaneous
  • Platform
    • 8V Announcements
    • Events
      • Current Events
      • Closed Events
    • Product
      • 8V Overview
      • Assets
      • Exchange
        • Spot Trading
        • Futures Trading
        • Leverage Trading
      • Copy Trading
      • Earn
        • Fixed
        • Flexible
      • Cryptocurrency Debit Card
      • Buy Crypto Instantly
      • Strategy Trading
    • Trading Fees and Limits
    • 8V Exchange API
    • Referral Scheme
    • Bug Bounty
    • FAQ
      • Account Functions
      • Deposits & Withdrawals
      • Others
  • Academy
    • How To Buy Crypto
    • Learning Centre
    • Analysis Center
    • Crypto Glossary
  • Business
    • Coin Listing Request
    • Crypto Trader Application
    • Partnerships
  • Policy
    • Privacy Policy
    • Service Agreement
    • Disclaimer
    • Compliance Notice
  • English
    • English
    • 中文 (台灣)
    • 中文 (中国)
  • Members
    • Login
    • Register
    • Activate
    • Add New Friends
No Result
View All Result
8V Crypto Academy
No Result
View All Result

Hackers Are Using Fake GitHub Code to Steal Your Bitcoin: Kaspersky

February 26, 2025
in Breaking, News
Reading Time: 10 mins read
A A

BTC

$88,698.89

–

2.88%

ETH

$2,488.23

+

0.31%

USDT

$0.9997

–

0.07%

XRP

$2.2912

+

1.63%

BNB

$621.65

+

2.77%

SOL

$141.58

+

2.35%

USDC

$1.0007

+

0.01%

DOGE

$0.2106

+

0.62%

ADA

$0.6843

+

1.39%

TRX

$0.2290

–

1.86%

WBTC

$88,626.92

–

2.93%

LINK

$15.28

+

3.20%

SUI

$3.0039

+

7.71%

AVAX

$22.07

+

2.72%

XLM

$0.2934

+

0.43%

LTC

$118.23

+

5.36%

TON

$3.5665

+

3.76%

SHIB

$0.0₄1424

+

3.76%

LEO

$9.0151

+

2.69%

HBAR

$0.1958

+

3.77%

Logo

Tech

Share this article

The attack starts with seemingly legitimate GitHub projects — like making Telegram bots for managing bitcoin wallets or tools for computer games.

By Shaurya Malwa|Edited by Parikshit Mishra

Feb 26, 2025, 6:29 a.m. UTC

hacker (Unsplash)

What to know:

  • A Kaspersky report from Monday warned users of a “GitVenom” campaign that’s been active for at least two years but is steadily on the rise.
  • The attack starts with seemingly legitimate GitHub projects — like making Telegram bots for managing bitcoin wallets or tools for computer games.
  • One such attack ending up draining a developer’s bitcoin wallet for over $400,000 worth of the token in November.

The GitHub code you use to build a trendy application or patch existing bugs might just be used to steal your bitcoin (BTC) or other crypto holdings, according to a Kaspersky report.

GitHub is popular tool among developers of all types, but even more so among crypto-focused projects, where a simple application may generate millions of dollars in revenue.

STORY CONTINUES BELOW

Don’t miss another story.Subscribe to the The Protocol Newsletter today.See all newslettersBy signing up, you will receive emails about CoinDesk products and you agree to ourterms of useandprivacy policy.

The report warned users of a “GitVenom” campaign that’s been active for at least two years but is steadily on the rise, involving planting malicious code in fake projects on the popular code repository platform.

The attack starts with seemingly legitimate GitHub projects — like making Telegram bots for managing bitcoin wallets or tools for computer games.

Each comes with a polished README file, often AI-generated, to build trust. But the code itself is a Trojan horse: For Python-based projects, attackers hide nefarious script after a bizarre string of 2,000 tabs, which decrypts and executes a malicious payload.

For JavaScript, a rogue function is embedded in the main file, triggering the launch attack. Once activated, the malware pulls additional tools from a separate hacker-controlled GitHub repository.

(A tab organizes code, making it readable by aligning lines. The payload is the core part of a program that does the actual work — or harm, in malware’s case.)

Once the system is infected, various other programs kick in to execute the exploit. A Node.js stealer harvests passwords, crypto wallet details, and browsing history, then bundles and sends them via Telegram. Remote access trojans like AsyncRAT and Quasar take over the victim’s device, logging keystrokes and capturing screenshots.

A “clipper” also swaps copied wallet addresses with the hackers’ own, redirecting funds. One such wallet netted 5 BTC — worth $485,000 at the time — in November alone.

Active for at least two years, GitVenom has hit users hardest in Russia, Brazil, and Turkey, though its reach is global, per Kaspersky.

The attackers keep it stealthy by mimicking active development and varying their coding tactics to evade antivirus software.

How can users protect themselves? By scrutinizing any code before running it, verifying the project’s authenticity, and being suspicious of overly polished READMEs or inconsistent commit histories.

Because researchers don’t expect these attacks to stop anytime soon: “We expect these attempts to continue in the future, possibly with small changes in the TTPs,” Kaspersky concluded in its post.

Shaurya is the Co-Leader of the CoinDesk tokens and data team in Asia with a focus on crypto derivatives, DeFi, market microstructure, and protocol analysis.
Shaurya holds over $1,000 in BTC, ETH, SOL, AVAX, SUSHI, CRV, NEAR, YFI, YFII, SHIB, DOGE, USDT, USDC, BNB, MANA, MLN, LINK, XMR, ALGO, VET, CAKE, AAVE, COMP, ROOK, TRX, SNX, RUNE, FTM, ZIL, KSM, ENJ, CKB, JOE, GHST, PERP, BTRFLY, OHM, BANANA, ROME, BURGER, SPIRIT, and ORCA.
He provides over $1,000 to liquidity pools on Compound, Curve, SushiSwap, PancakeSwap, BurgerSwap, Orca, AnySwap, SpiritSwap, Rook Protocol, Yearn Finance, Synthetix, Harvest, Redacted Cartel, OlympusDAO, Rome, Trader Joe, and SUN.

Shaurya Malwa


Contact

  • Contact Us
  • Accessibility
  • Advertise
  • Sitemap
  • System Status

DISCLOSURE & POLICES

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. CoinDesk has adopted a set of principles aimed at ensuring the integrity, editorial independence and freedom from bias of its publications. CoinDesk is part of the Bullish group, which owns and invests in digital asset businesses and digital assets. CoinDesk employees, including journalists, may receive Bullish group equity-based compensation. Bullish was incubated by technology investor Block.one.

EthicsPrivacyTerms of UseCookie ConsentDo Not Sell My Info


© 2025 CoinDesk, Inc.

 

Previous Post

XRP, BNB Edge Higher as Bitcoin Bulls Eye $90K After Tuesday Bloodbath

Next Post

Bybit Declares ‘War on Lazarus’ as It Crowdsources Effort to Freeze Stolen Funds

Related Posts

Miscellaneous

Binance Alpha 将在 8 月 15 日上线 TCOM Global (TCOM)

August 13, 2025
US prosecutors double down on 10-year sentence for HashFlare co-founders
Breaking

US prosecutors double down on 10-year sentence for HashFlare co-founders

August 13, 2025
Breaking

Grayscale launches two trusts linked to Sui ecosystem protocols

August 13, 2025
Breaking

Ethereum dev detained in Turkey donates to Roman Storm’s defense fund

August 13, 2025
Breaking

Crypto crime unit with $250M in seizures expands with Binance

August 13, 2025
Breaking

Coinbase revives stablecoin bootstrap fund to boost USDC in DeFi

August 13, 2025
Next Post

Bybit Declares ‘War on Lazarus’ as It Crowdsources Effort to Freeze Stolen Funds

Please login to join discussion
Top 20 Coins
Click on coin symbol for more information.
SYMBOL
PRICE
1D%
1W%
TREND
No Rows To Show
to of
Page of
Powered By 8V.com

Academy Analysis Announcements Blog Breaking Closed events Compliance Current events Events GameFi Learn Miscellaneous News NFT Platform Tech

  • Top 10 Altcoins to Watch in Q4 2025 to Q4 2026
  • 2026 Crypto Trend Prediction: Uncovering Future Shifts in Crypto Sectors
  • Unveiling the Future: Can Ethereum’s Upgrade Solve Economic Scalability Challenges
  • Elon Musk and Crypto: A Comprehensive Analysis and Shift in Strategy
  • Surviving the Crypto Shakeout: A Deep Dive into 1,200 Seed-Funded Projects from the Last Two Years
  • Analyzing Uniswap & Unichain
  • Analyzing Bitcoin Mining Pools and the Impact of Bitcoin Halving
8v.com - download APP 8v.com - download APP 8v.com - download APP
  • About 8V
  • Download APP
  • Announcements
  • Breaking News
  • RSS Feeds
  • Service Agreement
  • Privacy Policy
  • Disclaimer

© 2025 8V.com - 8V Crypto Academy - Empower your crypto journey! 8V.com

No Result
View All Result
  • About 8V
    • 8V Exchange
    • 8V Blog
  • Market Beat
    • Today Real-time Market Data
    • Web3
    • Breaking
    • Tokens
    • Markets
    • Compliance
    • Exchanges
    • Tech
    • GameFi
    • NFT
    • Defi
    • Miscellaneous
  • Platform
    • 8V Announcements
    • Events
      • Current Events
      • Closed Events
    • Product
      • 8V Overview
      • Assets
      • Exchange
      • Copy Trading
      • Earn
      • Cryptocurrency Debit Card
      • Buy Crypto Instantly
      • Strategy Trading
    • Trading Fees and Limits
    • 8V Exchange API
    • Referral Scheme
    • Bug Bounty
    • FAQ
      • Account Functions
      • Deposits & Withdrawals
      • Others
  • Academy
    • How To Buy Crypto
    • Learning Centre
    • Analysis Center
    • Crypto Glossary
  • Business
    • Coin Listing Request
    • Crypto Trader Application
    • Partnerships
  • Policy
    • Privacy Policy
    • Service Agreement
    • Disclaimer
    • Compliance Notice
  • English
    • English
    • 中文 (台灣)
    • 中文 (中国)
  • Members
    • Login
    • Register
    • Activate
    • Add New Friends

© 2025 8V.com - 8V Crypto Academy - Empower your crypto journey! 8V.com