The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
Huntress found tampered Exodus crypto wallet installers delivering a modular RAT that steals credentials rather than wallet funds.
Huntress analysts analyzed tampered installers for the Exodus cryptocurrency wallet that bundle a modular remote access trojan. The implant focuses on harvesting credentials instead of draining wallet balances, suggesting broader access theft. The case highlights installer tampering as a supply-chain-style delivery vector for credential-stealing tooling.
- Tampered Exodus wallet installers deliver a modular RAT
- Implant prioritizes credential theft over wallet draining
- Installer tampering acts as a supply-chain-style delivery vector
- Products
- Exodus Wallet
- Malware
- modular RAT
From the original article
Exodus crypto wallet analysis by Huntress uncovered tampered installers hiding a modular RAT focused on stealing credentials, not coins.
huntress.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.