Developers in the Web3 agentic AI attack — Nov 2026

What happened

The Kimsuky (APT-43) group has launched a sophisticated campaign targeting developers in the Web3, AI, and technology sectors. The attackers utilize fake recruitment portals, conference invitations, and package-tracking sites to lure victims into executing malicious commands via the "ClickFix" technique. By tricking users into pasting commands into their terminals under the guise of anti-spam verification, the attackers achieve initial access, leading to the deployment of infostealers and persistent agents on Linux, macOS, and Windows systems.

Analysis of the campaign infrastructure reveals a multi-layered architecture. The first layer consists of decoy websites that distribute Stage 2 scripts. Once executed, these scripts prepare the environment, download a Node.js payload, and install a JavaScript component (install_guard.js). This component functions as an infostealer, harvesting browser credentials, cryptocurrency wallets, and sensitive files, while also deploying persistent agents to maintain long-term access to the victim's machine.

The attackers employ a resilient Command and Control (C2) strategy, using GitLab repositories as relays to dynamically update C2 addresses without needing to redeploy code. The campaign management platform, referred to as "rms-platform," centralizes target collection, email delivery, and interaction tracking. Evidence suggests the use of generative AI in the development of this infrastructure, as the platform's internal documentation contains text characteristic of conversational AI assistants, and the code exhibits a homogeneous, heavily commented style consistent with AI-assisted development. The infrastructure is highly modular, allowing operators to swap C2 servers and rotate decoy domains efficiently. The campaign's reach is further extended through social engineering, such as conference registration forms that encourage victims to share access codes with colleagues, turning targets into dissemination vectors.