Storyline
Kaspersky uncovers OkoBot malware targeting crypto investors via fake GitHub apps
Cybersecurity firm Kaspersky has revealed a sophisticated malware framework called OkoBot that targets cryptocurrency investors through social engineering and trojanized GitHub applications.
Published 2026-07-18 11:40 UTCUpdated 2026-07-18 19:30 UTC
Current brief openSource links open
This current storyline is open here with summary, metadata, source links, continuity context, and full evidence. Paid is for compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
Cybersecurity firm Kaspersky has revealed a sophisticated malware framework called OkoBot that targets cryptocurrency investors through social engineering and trojanized GitHub applications.
Score total
1.27
Momentum 24h
3
Posts
3
Origins
2
Source types
2
Duplicate ratio
33%
Why now
- Kaspersky's recent discovery reveals an active malware campaign ongoing for over a year.
- The malware's multi-module design shows evolving complexity in crypto-targeted cyberattacks.
- Growing crypto adoption increases the potential impact of such targeted malware attacks.
Why it matters
- Highlights ongoing cybersecurity threats to crypto investors from sophisticated malware.
- Demonstrates risks of trojanized apps on popular developer platforms like GitHub.
- Emphasizes the importance of protecting crypto wallet recovery phrases from theft.
Continuity snapshot
- Trend status: insufficient_history.
- Continuity stage: emerging_confirmed.
- Current status: open.
- 3 current source-linked posts are attached to this storyline.
All evidence
All evidence
Kaspersky exposes OkoBot’s 20-module crypto wallet attack
Crypto.News · crypto.news · 2026-07-18 12:18 UTC
Kaspersky identifies malware framework targeting crypto investors
Cointelegraph · cointelegraph.com · 2026-07-18 11:40 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- Crypto.News (1)
- Cointelegraph (1)
Top origin domains (this list)
- crypto.news (1)
- cointelegraph.com (1)