Hacker News: overloadedophttps://news.ycombinator.com/user?id=overloadedopHacker News RSShttps://hnrss.org/hnrss v2.1.1Fri, 19 Jun 2026 22:13:39 +0000<![CDATA[New comment by overloadedop in "I found 10k GitHub repositories distributing Trojan malware"]]>I did a bit of reversing on it and it looks like it's a copy/fork of Aeternum. It takes screenshot and uploads it to a TA controlled infra, makes some eth_call via json rpc to polygon. the C2 is hosted by Organization: Standart AG, LLC (Latvia) ASN: AS207957

]]>Fri, 19 Jun 2026 11:29:08 +0000https://news.ycombinator.com/item?id=48597391overloadedophttps://news.ycombinator.com/item?id=48597391https://news.ycombinator.com/item?id=48597391