According to SlowMist, attackers hijacked GitHub accounts and pushed malware through Swarm's official release process on Tuesday, affecting Ethereum users across Windows, macOS and Linux. The compromised software installs malicious code capable of stealing private keys, wallet credentials and establishing persistent backdoors on infected systems.
SlowMist advises users to uninstall affected Swarm releases immediately and roll back to version 13.2.0, or upgrade Swarm Desktop to v0.56.3. The malware relies on an Ethereum smart contract as a decentralized command-and-control repository, allowing attackers to rotate server addresses without deploying new builds to already-infected machines.