{
  "name": "Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal",
  "slug": "sealed-chain-of-deception-actors-leveraging-nodejs-to-launch-jsceal",
  "description": "A sophisticated malware campaign called JSCEAL is targeting cryptocurrency users through fake apps impersonating popular trading platforms. The attackers use malicious ads to lure victims into downloading installers that deploy a multi-stage infection chain. This includes PowerShell scripts for profiling and a final payload of compiled JavaScript (JSC) files executed via Node.js. The JSCEAL malware steals crypto-related data and credentials while employing advanced evasion techniques. The campaign has potentially reached millions of users across multiple countries, primarily targeting the cryptocurrency and financial sectors.",
  "published": "2025-07-31T07:54:32+00:00",
  "created_at": "2025-07-31T07:54:32+00:00",
  "modified_at": "2025-07-31T09:17:44+00:00",
  "created_at_opencti": "2025-07-31T07:54:32+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-07-31",
    "cryptocurrency",
    "evasion",
    "fake apps",
    "jsc",
    "jsceal",
    "malvertising",
    "multi-stage",
    "node.js",
    "powershell",
    "stealer"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "www.twex.exchange"
      },
      {
        "id": "",
        "name": "www.topshare.com.au"
      },
      {
        "id": "",
        "name": "www.coinhub.mn"
      },
      {
        "id": "",
        "name": "www.bitazza.com"
      },
      {
        "id": "",
        "name": "https://www.twex.exchange/"
      },
      {
        "id": "",
        "name": "https://www.topshare.com.au/"
      },
      {
        "id": "",
        "name": "https://www.tokenmetrics.com/"
      },
      {
        "id": "",
        "name": "https://www.mercadobitcoin.com.br/"
      },
      {
        "id": "",
        "name": "https://www.coinhub.mn/"
      },
      {
        "id": "",
        "name": "https://www.solflare.com/"
      },
      {
        "id": "",
        "name": "https://www.bitkub.com/"
      },
      {
        "id": "",
        "name": "https://www.bitazza.com/"
      },
      {
        "id": "",
        "name": "https://www.bee.com/"
      },
      {
        "id": "",
        "name": "https://wowbit.com/"
      },
      {
        "id": "",
        "name": "https://vindax.com/"
      },
      {
        "id": "",
        "name": "https://remitano.com/"
      },
      {
        "id": "",
        "name": "https://lutianwl.com"
      },
      {
        "id": "",
        "name": "https://kfc.global"
      },
      {
        "id": "",
        "name": "https://gmgn.ai/"
      },
      {
        "id": "",
        "name": "https://bitcoinvn.io/"
      },
      {
        "id": "",
        "name": "https://bithumbcorp.com/en/"
      },
      {
        "id": "",
        "name": "https://app.daomaker.com/"
      },
      {
        "id": "",
        "name": "https://app.akka.finance"
      },
      {
        "id": "",
        "name": "https://pdax.ph/"
      },
      {
        "id": "",
        "name": "xhab.grpc-test.me"
      },
      {
        "id": "",
        "name": "r2.ohyoulookstupid.win"
      },
      {
        "id": "",
        "name": "llr.experimental-tech.com"
      },
      {
        "id": "",
        "name": "windows-downloads-app.com"
      },
      {
        "id": "",
        "name": "twisted.mom"
      },
      {
        "id": "",
        "name": "timing-kings.com"
      },
      {
        "id": "",
        "name": "taylor-convert.com"
      },
      {
        "id": "",
        "name": "schilllr.icu"
      },
      {
        "id": "",
        "name": "supercharming.com"
      },
      {
        "id": "",
        "name": "supernegro.mom"
      },
      {
        "id": "",
        "name": "printscreen.lol"
      },
      {
        "id": "",
        "name": "pffffer.icu"
      },
      {
        "id": "",
        "name": "pc-downloads.com"
      },
      {
        "id": "",
        "name": "pc-downloads-desktop.com"
      },
      {
        "id": "",
        "name": "pc-downloads-app.com"
      },
      {
        "id": "",
        "name": "pc-download-desktops.com"
      },
      {
        "id": "",
        "name": "pc-download-desktop.com"
      },
      {
        "id": "",
        "name": "pc-download-app.com"
      },
      {
        "id": "",
        "name": "pc-desktops-apps.com"
      },
      {
        "id": "",
        "name": "pc-apps-downloads.com"
      },
      {
        "id": "",
        "name": "pc-apps-download.com"
      },
      {
        "id": "",
        "name": "pc-app.com"
      },
      {
        "id": "",
        "name": "pc-app-downloads.com"
      },
      {
        "id": "",
        "name": "pc-app-download.com"
      },
      {
        "id": "",
        "name": "pc-app-desktops.com"
      },
      {
        "id": "",
        "name": "paid-rewards.lol"
      },
      {
        "id": "",
        "name": "lutianwl.com"
      },
      {
        "id": "",
        "name": "luiowitz.cfd"
      },
      {
        "id": "",
        "name": "lovely-race.com"
      },
      {
        "id": "",
        "name": "local-mailer.com"
      },
      {
        "id": "",
        "name": "grpc-test.me"
      },
      {
        "id": "",
        "name": "foo-foo.bar"
      },
      {
        "id": "",
        "name": "firewall-813.com"
      },
      {
        "id": "",
        "name": "external-sex.com"
      },
      {
        "id": "",
        "name": "downloads-windows-apps.com"
      },
      {
        "id": "",
        "name": "experimental-tech.com"
      },
      {
        "id": "",
        "name": "downloads-windows-app.com"
      },
      {
        "id": "",
        "name": "downloads-pc-desktop.com"
      },
      {
        "id": "",
        "name": "downloads-desktop.com"
      },
      {
        "id": "",
        "name": "downloads-desktop-windows.com"
      },
      {
        "id": "",
        "name": "downloads-apps.com"
      },
      {
        "id": "",
        "name": "downloads-apps-windows.com"
      },
      {
        "id": "",
        "name": "downloads-app.com"
      },
      {
        "id": "",
        "name": "downloads-app-pc.com"
      },
      {
        "id": "",
        "name": "download-windows-desktops.com"
      },
      {
        "id": "",
        "name": "download-desktops.com"
      },
      {
        "id": "",
        "name": "download-desktops-pc.com"
      },
      {
        "id": "",
        "name": "download-pc-app.com"
      },
      {
        "id": "",
        "name": "download-desktops-app.com"
      },
      {
        "id": "",
        "name": "download-desktop.com"
      },
      {
        "id": "",
        "name": "download-apps-windows.com"
      },
      {
        "id": "",
        "name": "download-apps-pc.com"
      },
      {
        "id": "",
        "name": "download-apps-desktop.com"
      },
      {
        "id": "",
        "name": "download-app-pc.com"
      },
      {
        "id": "",
        "name": "dockmilk.com"
      },
      {
        "id": "",
        "name": "desktops-pc-download.com"
      },
      {
        "id": "",
        "name": "desktops-downloads-app.com"
      },
      {
        "id": "",
        "name": "desktops-download-pc.com"
      },
      {
        "id": "",
        "name": "desktop-pc-download.com"
      },
      {
        "id": "",
        "name": "desktops-download-app.com"
      },
      {
        "id": "",
        "name": "desktop-downloads.com"
      },
      {
        "id": "",
        "name": "desktop-app-pc.com"
      },
      {
        "id": "",
        "name": "desktop-apps.com"
      },
      {
        "id": "",
        "name": "desktop-app-download.com"
      },
      {
        "id": "",
        "name": "csgo-play-de.com"
      },
      {
        "id": "",
        "name": "bithumbcorp.com"
      },
      {
        "id": "",
        "name": "bitcoinvn.io"
      },
      {
        "id": "",
        "name": "apps-pc-downloads.com"
      },
      {
        "id": "",
        "name": "apps-pc-download.com"
      },
      {
        "id": "",
        "name": "apps-downloads-pc.com"
      },
      {
        "id": "",
        "name": "apps-downloads-desktop.com"
      },
      {
        "id": "",
        "name": "apps-download-desktops.com"
      },
      {
        "id": "",
        "name": "apps-desktops-pc.com"
      },
      {
        "id": "",
        "name": "apps-desktops-downloads.com"
      },
      {
        "id": "",
        "name": "apps-desktop.com"
      },
      {
        "id": "",
        "name": "apps-desktops-download.com"
      },
      {
        "id": "",
        "name": "apps-desktop-downloads.com"
      },
      {
        "id": "",
        "name": "apps-desktop-download.com"
      },
      {
        "id": "",
        "name": "app-windows.com"
      },
      {
        "id": "",
        "name": "app-pc.com"
      },
      {
        "id": "",
        "name": "app-pc-windows.com"
      },
      {
        "id": "",
        "name": "app-pc-downloads.com"
      },
      {
        "id": "",
        "name": "app-pc-download.com"
      },
      {
        "id": "",
        "name": "app-pc-desktops.com"
      },
      {
        "id": "",
        "name": "app-downloads-desktops.com"
      },
      {
        "id": "",
        "name": "app-desktops-pc.com"
      },
      {
        "id": "",
        "name": "app-desktops-downloads.com"
      },
      {
        "id": "",
        "name": "app-desktop.com"
      },
      {
        "id": "",
        "name": "app-desktop-download.com"
      },
      {
        "id": "",
        "name": "87-899.help"
      },
      {
        "id": "",
        "name": "18-22-59.com"
      },
      {
        "id": "",
        "name": "fb35436322e9429a498f79b9abea24ca419fafab93117582c3e97f9beab3a034"
      },
      {
        "id": "",
        "name": "f97b286d61b26c98b900bb842fb7a5ccd781162bbeca8032f9c0ed81fe93fb7d"
      },
      {
        "id": "",
        "name": "f8d598d28dbb8294a5c709ab23d51e29e652ab47d5a317aa31f6302481159458"
      },
      {
        "id": "",
        "name": "f720d6f6baebd4ef76df978f2678387385ee2d20a37423e7957c2341fe46f9ca"
      },
      {
        "id": "",
        "name": "f6c670e65765d10a5ca0205a6ece3a3e6c7c730b0a8534c5adef4a3cbf06eb9c"
      },
      {
        "id": "",
        "name": "f5196deca103fba2b4de772a1415bafc616e5baa3fc6a388d0f8ee79d6f350f8"
      },
      {
        "id": "",
        "name": "f1c3e6e5e7b63db19da86914726389b058a085830e0496173defe01d07849b9b"
      },
      {
        "id": "",
        "name": "ed6746a55f2160c586fdc66cd2c1db69f7fd0a73e6c2f1d83dd240c43828ba58"
      },
      {
        "id": "",
        "name": "e881682b59640c05cd540696955a849610260415e576f79b62383108c1aa3354"
      },
      {
        "id": "",
        "name": "e7945eee02f90a9a03eb82e64fcc8ed07fd1d6d528afe0f8f948699b0497c5f0"
      },
      {
        "id": "",
        "name": "e51855ae6e8e69f66c2af6d939769385f53e57445b9734b1b4811c09bfc80c97"
      },
      {
        "id": "",
        "name": "e48eba9d41a2d46d963c1117604005f53afce3e7e1ac5e0a7cca3b642720e7c2"
      },
      {
        "id": "",
        "name": "e14f1f80f192f1c36854474e7da7e660d06eca0a199df08c2aa6e34eb4847953"
      },
      {
        "id": "",
        "name": "df93e348cc67d04318c0e439f5dbca681a3c1112924f57393cb57fc6a3d121d6"
      },
      {
        "id": "",
        "name": "de213ebc44c614d0b2324787e267183dbbbbb19e1ad866435a322ee00e24e7b6"
      },
      {
        "id": "",
        "name": "dd2bb7316be55446aebfa31d05e57e936eb9a18d5d9c20d60d87493100d05fe6"
      },
      {
        "id": "",
        "name": "dce4294fb041c22de81d3eb4c4a178b5bdf6d9fb48b348556a51582553b3fb52"
      },
      {
        "id": "",
        "name": "dc561df51d27ed3a99cb916bf08452c901956778c26709e69705cbdf77f74816"
      },
      {
        "id": "",
        "name": "d8ebbee135dba28a08fd975366ddf62d3ab2ed10f2b339b867ba6800cbb9321e"
      },
      {
        "id": "",
        "name": "d7dba181b322bc6f51b7e530e924ba4f60b7334a72be7c5d92fd219502bb252e"
      },
      {
        "id": "",
        "name": "d7cbdc2b5c57b1f61c771be74e56aefc05ebd8faeb0d9a7b02daff6946248dbb"
      },
      {
        "id": "",
        "name": "d4bd8ba1ca7643016e324cdee81f46b2c5a49508fdc9011d71abeeea672e35fa"
      },
      {
        "id": "",
        "name": "d17a330bb7c929efffb8a42d6ca224f839548560603f88e432043735d392bc85"
      },
      {
        "id": "",
        "name": "cd6785e9690349d95ce34d30befe8b472f304e7c1129a0824c6e7a909aab7805"
      },
      {
        "id": "",
        "name": "caf8bfc90e4300b8a18c3fe3a4badbe44c106830e7432d8eea227857a790ec91"
      },
      {
        "id": "",
        "name": "c9b14e41443d3d43907352f5c6cf46c53e7c9b69bf9299f8d61081e314e5ad4f"
      },
      {
        "id": "",
        "name": "c7eedf31cf9e456cc9eb419edf30573f9ba03e80faccce9e86373e935f6c1b93"
      },
      {
        "id": "",
        "name": "c7edcad8b139961ff93aba148b16227147b019b036cdce58522979c9b833a0bf"
      },
      {
        "id": "",
        "name": "c50fe7a338e7e2edb430688c87c65f92a0efd2115a8fab2e4e9776893d28db86"
      },
      {
        "id": "",
        "name": "c65fdb27d1b478a4926c2e283f8c50e827d522c13ba56da67e1fb436548a4454"
      },
      {
        "id": "",
        "name": "c417e37fb42f8b7fa282992a11b1d75840b035b92e0e39891cf153cc373c0c4e"
      },
      {
        "id": "",
        "name": "c3bca61beb2a6027bc5f15cf93f47749c9406bee22ee0b579a7ffb0511e6c054"
      },
      {
        "id": "",
        "name": "c320e4d29fb661273e0cda16c756d962a62b2ad3d76ab13c4d1aa7dcb6168449"
      },
      {
        "id": "",
        "name": "bc5d17555db59898dd15f43c8362d4f3c4013d80d64442d25d05f50caca00655"
      },
      {
        "id": "",
        "name": "b90e3aaae14e7787e5ea4a6d4beee672049bd5eb05427f2c80b64f605860d2b8"
      },
      {
        "id": "",
        "name": "b6e4075d371dfaa63c8a78fc4c03cfb6051202d347e6c803c6d8962b24d0b6e8"
      },
      {
        "id": "",
        "name": "b1b608c7f0d943b48102237347754e593ac09715f0deda6a4a61730ece03a942"
      },
      {
        "id": "",
        "name": "af8fafea328954d50c459e3da9bcb0df2fa468e4e9df1cdbf827aa99bc1a9378"
      },
      {
        "id": "",
        "name": "ad558fb6438fc5d7b1a6af482646ea9d7a344221fa9f077d21f5ebdee2e223c8"
      },
      {
        "id": "",
        "name": "acdaba94e9975e8e03fa13bae7f0f93f165f42226aeecea3af5a4e0111bdfb7e"
      },
      {
        "id": "",
        "name": "abcbbaf9e5b34d59c9caa015a0276a457e0de2b403a5a8aff37617f141f1bb96"
      },
      {
        "id": "",
        "name": "a9528e99a5b0a288855fca1d3a03975fe99ad6c5b8702a27d12e94c9a7a5367d"
      },
      {
        "id": "",
        "name": "a817fba621e90c631d3ed9d062d12c34e4ef211385dede672a7eda4b5543e533"
      },
      {
        "id": "",
        "name": "a696d03aeb1bde633b674bdd640a1a313cae7da711d99cfba3fd06f02d3864de"
      },
      {
        "id": "",
        "name": "a5b97ec3fee224213eebd1c762e0f874481af46bfcd521cbf3baba4b1c1b6037"
      },
      {
        "id": "",
        "name": "a4a0b3ab214a2d32703c1398819372aa7b491d195d1845f2d9f4f0dffc7fadf2"
      },
      {
        "id": "",
        "name": "a2b4413d9280aa2662643305ef7e624719e4e8c9dd7bfed15bf2867bea08901f"
      },
      {
        "id": "",
        "name": "a22d15afdeeb983d73255e274a8b62b76d267ca1cf943228d17992ceb6fd1643"
      },
      {
        "id": "",
        "name": "a05f029c644f8ad912994a364aa4a6c1d64da0a894f7856bc9be251e598404f9"
      },
      {
        "id": "",
        "name": "a02f1d868e1d18c8b8159d4fa915bc238d35824ac553cd835ef9702e28b1ebb7"
      },
      {
        "id": "",
        "name": "9e56b950de6ef2e38f866921e7c311f074b7edb9735257c2d0d57cd3d2067d5b"
      },
      {
        "id": "",
        "name": "9ce4d4e97956c190d384837d42274d8db33ae6073ab318f1e55f3e03da62507d"
      },
      {
        "id": "",
        "name": "9bfe57d6f74fd822c7431ee3fedb0ef36c6841634f015aa8a364006a68d45310"
      },
      {
        "id": "",
        "name": "99f9f2701ef2302072e77433a055db3ffece476f0a4aef91099ecdaefaf9bac0"
      },
      {
        "id": "",
        "name": "99b8124c2a64d26567f19a44618144b1d6a7501a5892918f0120a496f983a0f2"
      },
      {
        "id": "",
        "name": "9667c18082a1d40b9b28b8eacf92df97226be3be93090eb599ef247eb50e1176"
      },
      {
        "id": "",
        "name": "95b39a0bad021f33e08df042b02d3267faee7bbc3e3080dda295c35b464dd607"
      },
      {
        "id": "",
        "name": "8e7a3c7d6e0b0569f4d521482935d9627be10cfef10e4ba17e59b2167d258fac"
      },
      {
        "id": "",
        "name": "8d389f56c5b71d194bddd5b6ce5906e7e22730034ad882606cc8ae701011bf8c"
      },
      {
        "id": "",
        "name": "8acc2c1e5b6cb4266bfa926972b03d4b5bb4fad6f2a65adb78acf47cf0225404"
      },
      {
        "id": "",
        "name": "8abffe0d13d3b93ca3469045e4cebbee25b3631e6bba13880f04b7c8acac2536"
      },
      {
        "id": "",
        "name": "8a9b2c59cfa1f332c12b430e0e7f367ea812871bb6825e172b85bb479068010d"
      },
      {
        "id": "",
        "name": "8a7cf380772eabbe54d60dd713b0c733de67e82f4295b6638b81aaa76037e111"
      },
      {
        "id": "",
        "name": "86dbef518d357a9b1517cd9dfdcf1b611f2c1afcf4496cefa99a4f2c3dff21e4"
      },
      {
        "id": "",
        "name": "86ca0cac017def21fcf74ecae8a00aa8830d825cad4f694d89a5af9954ce0234"
      },
      {
        "id": "",
        "name": "869ab661ae67d16d91da2e9edd9a4db7fb5a342043336e62ace5ff54738c8926"
      },
      {
        "id": "",
        "name": "86610f1a2c87b80c898ec485681193f0788c017f2d0f73fad26b259655c6a8a5"
      },
      {
        "id": "",
        "name": "84db0663b6aa8df2ac04470288fd5528f5537fb89d78a2e01cabdce371a686e8"
      },
      {
        "id": "",
        "name": "84195ae96768bc312b7494a8ba0493a772042bed068bc019c8d3dd9daf39bbf6"
      },
      {
        "id": "",
        "name": "84174151afe82a85b035f66f99e6a47aa0f7ccdc32414371a434551a6ba9d216"
      },
      {
        "id": "",
        "name": "833841da3f61be8ec8eb6c660f592772fa6085563a4ce9bc8ea33dbc646cef24"
      },
      {
        "id": "",
        "name": "825ece5c2dc6fb79a8afdf15daa32868a3cba71e726e2171025017fed1f2d606"
      },
      {
        "id": "",
        "name": "7ec75e7bbb70ae4eae79e0951231e479d28490ba090b628f2d252041370b2da5"
      },
      {
        "id": "",
        "name": "7ee0db8bade12d9861ccf8f43334a217c587d97bc0828238a98a325aaff75f8e"
      },
      {
        "id": "",
        "name": "7e1c82cdcff73ac69fee3ba71d67353a062103f1bfae4f263d03b3b84e48d782"
      },
      {
        "id": "",
        "name": "7d2c797e363d45c74d90ad23438072c4e80ee2a1aa3aa8ea7f4d414b264d91cd"
      },
      {
        "id": "",
        "name": "7af6c284b3bd701476929e8888b13015c31def1039bef91c63ba15368d9771ba"
      },
      {
        "id": "",
        "name": "7a6beb95d6c5c790cdfe04d4634f5ebf24707f80ed75ba20c09b1b78e4f448a5"
      },
      {
        "id": "",
        "name": "75e03884bf2f630c41ca04148cb28b7163945e146287fd1d2aafb10d3dd9b9d9"
      },
      {
        "id": "",
        "name": "74c9175036bcaa239f433a98606df3a3be60ab9246f2067f500cea4b2be09a8f"
      },
      {
        "id": "",
        "name": "7423a2a11a00a2d43adf583f9465e776a69ceafe17d5a1c756b8160b243a9210"
      },
      {
        "id": "",
        "name": "72feb1a5349d6de289ba46509ab8b85fd91179fb533b607150d977914e924136"
      },
      {
        "id": "",
        "name": "7084b80c30b30679ccbb42014f60a079f2de8e31daeaf0b7463ab305916d52b9"
      },
      {
        "id": "",
        "name": "6e885af1b4b884c264f29253b80bfa47b29af7ac0757e5148e8cb3c342cd3183"
      },
      {
        "id": "",
        "name": "6b498ec73d32860202b6a6ff8d21f8b5216c3903e066136f9d69ef2969955a78"
      }
    ],
    "malware": [
      {
        "id": "87a32c52-d28a-487e-a65a-be5608b18222",
        "name": "JSCeal",
        "slug": "jsceal"
      }
    ],
    "attack_patterns": [
      {
        "id": "40f0d8e3-bcd7-4b97-a958-f55815698fc5",
        "name": "T1053.005"
      },
      {
        "id": "32b33067-6566-4b8d-be80-e96f765d84de",
        "name": "T1059.001"
      },
      {
        "id": "5999052b-e9ae-49e8-9235-d9bf975c22af",
        "name": "T1547.001"
      },
      {
        "id": "93b2c4dd-5523-4464-8976-78754ee372fd",
        "name": "T1012"
      },
      {
        "id": "667462db-9031-48eb-893a-05d35f9330a7",
        "name": "T1056.001"
      },
      {
        "id": "196f2a64-c55b-47a6-8e38-beb76ba700b6",
        "name": "T1204.002"
      },
      {
        "id": "dc17cbbd-40d8-43cf-b3cf-50d1276db2c7",
        "name": "T1016"
      },
      {
        "id": "29398669-98ed-4766-9dac-f9632f7175ff",
        "name": "T1518"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "45082a8e-9c79-470e-ad1b-decac7188e8f",
        "name": "T1083"
      },
      {
        "id": "5b7c66d1-0466-4ba7-af6f-eb82c2f9d05b",
        "name": "T1033"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Finance"
      },
      {
        "id": "",
        "name": "runt.monster"
      }
    ]
  },
  "external_refs": [
    "https://research.checkpoint.com/2025/jsceal-targets-crypto-apps/",
    "https://otx.alienvault.com/pulse/688b3d58e80e0edcd1cb1e22"
  ]
}