SlowMist Warns of Supply Chain Attack in Ethereum Ecosystem

Blockchain security company SlowMist has issued an urgent security warning for users in the Ethereum ecosystem. The warning is based on a complex supply chain attack detected in Ethersphere software. It was noted that two different software versions were compromised by attackers. The attackers exploited legitimate software publishing processes by breaching GitHub accounts and distributed malicious versions. This situation could affect multiple operating systems, including Windows, macOS, and Linux. The affected software is part of the decentralized storage network Swarm within the Ethereum ecosystem. Security experts warned that these malicious versions could capture cryptocurrency wallet credentials and create persistent backdoors in the affected systems. SlowMist reported that the malware downloads and executes malicious JavaScript code. Additionally, it was stated that the attackers used an Ethereum smart contract to update the server addresses managing the malware. The same smart contract has been linked to previous malware attacks. Independent security researchers have identified malicious components aimed at stealing Swarm wallet files. SlowMist recommended that users immediately remove the affected package and revert to the clean version 13.2.0. Users of Swarm Desktop v0.56.2 were also urged to update to the clean version v0.56.3.