Back to Top

Gavnosource.rar May 2026

Scans for browser extensions and desktop files related to MetaMask, Binance, Phantom, and Atomic Wallet.

Upon execution, the malware performs several "anti-analysis" checks: gavnosource.rar

Exfiltration of browser credentials, cryptocurrency wallets, session cookies, and system metadata. Scans for browser extensions and desktop files related