Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

The Hacker News · Monday, 9 November 2026 at 17:36 (1h ago) · Original article ↗

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2.

Both releases download and run code built to steal the wallet key that Swarm Desktop keeps for its node, along with the stored password that unlocks it. The code is also built to install a backdoor

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

France blames Iranian hackers for supermarket attacks that sparked fires

France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires. [...]

BleepingComputer 28m ago

Security

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole's platform uses to reach those…

The Hacker News 1h ago

Security

Russian cloud firm Beget rebuilds from scratch after data wiper attack

A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]

BleepingComputer 1h ago

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

More Security & Privacy

France blames Iranian hackers for supermarket attacks that sparked fires

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

Russian cloud firm Beget rebuilds from scratch after data wiper attack