35
35
45
The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
Huntress found tampered Exodus crypto wallet installers delivering a modular RAT that steals credentials rather than wallet funds.
Huntress analysts analyzed tampered installers for the Exodus cryptocurrency wallet that bundle a modular remote access trojan. The implant focuses on harvesting credentials instead of draining wallet balances, suggesting broader access theft. The case highlights installer tampering as a supply-chain-style delivery vector for credential-stealing tooling.
48
30
45
30
30
35
50
30
30
45
30
30
30
30
30
30
30
30
30
30
30
30
30
45
30
30
30
30
30
30
30
30
30
30
30
30
30