Fake screenshot links used to infect Web3 support teams with multi-stage malware
VPN Central [Unofficial]
March 28, 2026
A targeted malware campaign is hitting Web3 customer support staff through fake screenshot links sent in live chat conversations. Instead of exploiting a software flaw, the attackers pose as customers, send what looks like a harmless image link, and rely on the support agent to open a disguised executable that starts a multi-stage infection chain. […]
The post Fake screenshot links used to infect Web3 support teams with multi-stage malware appeared first on VPN Central.
Discussion in the ATmosphere