Fake PyPI Packages Steal Millions by Posing as Crypto Wallet Recovery Tools

The Python Package Index (PyPI) has been found hosting fake cryptocurrency wallet recovery tools that steal user data. The malicious packages posed as legitimate recovery tools but were designed to exfiltrate sensitive information, exploiting wallet recovery tools to steal millions. Attackers employed dynamic dead drop resolvers to evade detection. This incident highlights the evolving tactics used by cybercriminals to target cryptocurrency users.