Buy Crypto
Pay with
USD
USD
Buy & Sell
Hot
Supports Visa, Mastercard, SEPA & more
P2P
0 Fees
Flexible trading, zero fees
Gate Card
Use your crypto for payments worldwide
P2P Loan
Grow your wealth in fiat investment
Markets
Trade
Basic
Advanced
Futures
Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Stocks
CFD
U.S. stock CFD derivatives
US Stocks
Access real US stocks and ETFs
HK Stocks
Trade quality Hong Kong-listed stocks
Korean Stocks
SK Hynix
Real Korean stocks and top assets
Stock Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
IPO Access
Unlock full access to global stock IPOs
GUSD
Mint GUSD for Treasury RWA yields
Stocks Activities
Trade Popular Stocks and Unlock Generous Airdrops
Earn
Launch
CandyDrop
tag
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
IPO Access
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Investment
Square
Square
Post, share, and explore crypto trends
Live
moments live
Live crypto market analysis
Chat
Chat with crypto traders
News
What is happening in crypto
flower_head
More
Promotions
AI
Others
TradFi
2026 World Cup
Rewards

EtherRAT Malware Recently Identified Combining Credential Theft and Cryptocurrency Wallet Attacks

GateNews
ethereum newsSecurity Incidents
According to LevelBlue SpiderLabs researchers, EtherRAT, a recently identified malware, combines credential theft, remote access, and cryptocurrency wallet attacks in a single coordinated campaign. The malware is distributed through fake Tftpd64 installers hosted on fraudulent GitHub repositories designed to mimic the legitimate TFTP server utility. The malware bundle includes multiple Ethereum RPC endpoints associated with Flashbots, Tenderly, LlamaRPC, and DRPC, along with Ethereum wallet addresses, enabling attackers to conduct blockchain interactions and facilitate cryptocurrency asset theft. Researchers warned that the campaign targets IT administrators and network professionals, as trusted administrative tools attract less scrutiny from security systems.
View Source
Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.

Related News

05-02 03:45
Hundreds of Dormant Ethereum Wallets Drained by Single Address
05-01 16:10
Dormant Wallet Possibly Linked to Ethereum Foundation Deposits $4.03M in ETH After 7 Years
05-01 06:54
Purrlend Suffers $1.52M Security Breach on April 25 Across HyperEVM and MegaETH
04-29 08:35
Ethereum Suffers 4 Smart Contract Attacks in 48 Hours, Losses Exceed $1.5 Million
04-29 04:07
Slow Mist Detects EIP-7702 Exploit: QNT Reserve Pool Loses 1,988.5 QNT (~$54.93M in ETH)
In-Depth Analysis

Hundreds of Ethereum Wallets Simultaneously Hacked, Assets Transferred

Crypto Frontier05-01 17:41

Ethereum ETFs Shed $184M Over 4-Day Losing Streak

Crypto Frontier05-01 15:52

500+ Ethereum Wallets Drained in Coordinated Attack, Funds Laundered via ThorChain

Crypto Frontier05-01 10:13
Comment
0/400
No comments