Malicious NuGet Typosquat Targets Digitain Betting Platform and Rigs Game Results

Gbhackers •Kavichselvan • July 22, 2026

JFrog Security Research has disclosed a precision supply-chain attack in which a typosquatted NuGet package, Newtonsoftt.Json.Net, impersonated the ubiquitous Newtonsoft.Json library while secretly rigging game outcomes at online betting operator Digitain. Unlike typical info-stealers that harvest credentials indiscriminately, this trojan functions as a fully operational JSON library for every host except its single intended target. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NuGet Typosquatting Attack Rigging Digitain Game Results A malicious NuGet package named 'Newtonsoftt.Json.Net' was discovered, targeting the Digitain betting platform by rigging game results. The package, which mimicked the legitimate Newtonsoft.Json library, was downloaded around 1,200 times before being removed. It specifically affected systems running Digitain's FG-Crash betting game, introducing randomized delays to avoid detection while exfiltrating altered game outcomes to an attacker-controlled server. The malware's progression included increasing obfuscation and sophisticated rigging strategies. Digitain has acknowledged the issue and implemented corrective measures. Developers are advised to remove the package and block the command and control (C2) address. This incident marks a notable evolution in supply chain attacks, focusing on targeted manipulation rather than broad data theft. 3 sources 69

Extracted Entities

Malicious NuGet Typosquat Targets Digitain Betting Platform and Rigs Game Results

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Platforms (1)