Needle: Inside a Modular Crypto-Stealing C2 That Left Its Keys in the Malware

Reported 11 May 2026 by otx · Severity: medium

A modular Malware-as-a-Service crypto-stealing platform called Needle has been discovered actively targeting cryptocurrency wallets through two main attack vectors: a browser extension spoofer targeting MetaMask, Phantom, and Trust Wallet, and a Rust-based desktop agent impersona