Critical Security Alert for Ethereum Users Due to Supply Chain Attack

• •A critical supply chain attack on Ethersphere's software has been confirmed.
• •Malware can compromise cryptocurrency wallets and establish backdoors.
• •Users are advised to uninstall affected software and update to secure versions.

Blockchain security provider SlowMist has issued a critical security alert for Ethereum users following a supply chain attack on Ethersphere's software. Hackers compromised GitHub accounts to deploy malicious software that affects Swarm, a decentralized storage network within the Ethereum ecosystem. This attack could impact users across multiple operating systems, including Windows, macOS, and Linux. The malware can steal cryptocurrency wallet credentials and private keys, and establish permanent backdoors on affected systems. Notably, the attack utilizes an Ethereum smart contract for command-and-control functions, allowing attackers to update the malware dynamically. SlowMist has advised users to uninstall the affected software and revert to a clean version. Independent researchers also identified malware targeting Swarm wallet files and remote access tools. Users are urged to update to the latest secure software version immediately.