The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT

Reported 01 Sep 2026 by otx · Severity: medium

Between late July and mid-August 2026, multiple organizations were compromised by a sophisticated modular RAT disguised as a legitimate Exodus cryptocurrency wallet. Victims were tricked through fake PDFs or software updates delivered via JavaScript files that downloaded a tamper