Security· ★★★★· bearish·

Fake LastPass GitHub repos spread Rapuncel infostealer

  • Rapuncel targets data from over 30 crypto wallets and 25 browsers
  • Driver Alinubx.sys terminated 145 antivirus and EDR processes
  • ZIP archives up to 148 MB evaded scanners via file size
  • The driver had zero detections across 72 VirusTotal engines
Why it matters: The attack directly targets seed phrases and wallets, while the signed driver bypassed defenses, raising the risk of large-scale crypto theft.
Source: DiarioBitcoin