The financially motivated threat actor known as EncryptHub (also referred to as LARVA-208 and Water Gamayun) has launched a new campaign targeting Web3 developers with information stealer malware. This group has adapted its tactics by using fake AI platforms, such as Norlax AI, to entice victims with job offers and portfolio review requests.
Explain It To Me Like I’m 5: The bad guys, called EncryptHub, are tricking people who make cool internet stuff (Web3 developers) by pretending to offer them jobs or help with their work, so they can steal their information.
Want More Context? 🔎