GlassWorm update:• Solana dead drop C2 + DHT fallback• Fake Chrome extension → full browser exfil• HW wallet phishing (Ledger/Trezor)• HVNC + SOCKS modules• Targets npm, PyPI, MCPDecentralized infra = stealth persistence.

[technadu@infosec.exchange]

GlassWorm update:
• Solana dead drop C2 + DHT fallback
• Fake Chrome extension → full browser exfil
• HW wallet phishing (Ledger/Trezor)
• HVNC + SOCKS modules
• Targets npm, PyPI, MCP
Decentralized infra = stealth persistence.

Source: https://thehackernews.com/2026/03/glassworm-malware-uses-solana-dead.html

Follow @technadu

#InfoSec #ThreatIntel #Malware