BIPClip: Malicious PyPI packages target crypto wallet recovery passwords

ReversingLabs has identified a new, malicious campaign consisting of seven different open source packages with 19 different versions on the Python Package Index (PyPI), with the oldest package dating back to December, 2022. The campaign's goal: to steal mnemonic phrases used to recover lost or destroyed crypto wallets.  

This is just the latest software supply chain campaign to target crypto assets — a list that includes the compromise of Voice over IP (VoIP) vendor 3CX. It confirms that cryptocurrency continues …

back campaign crypto crypto wallet crypto wallets dating december goal lost malicious malicious pypi packages mnemonic open source open source packages package packages passwords pypi pypi packages python python package python package index recover recovery reversinglabs steal target threat research wallet wallets