Web3 Malware Deobfuscated

My article: https://zenn.dev/waki285/articles/web3-malware-deobfuscated (Japanese)

Introduction

This repository contains deobfuscated source code of cryptocurrency-stealing malware found on GitHub. The code has been restored and documented for educational purposes only, to help security researchers and developers understand malicious techniques used in Web3 attacks.

Original repository (UNSAFE!): https://github.com/arsantin/cometec

⚠️ WARNING

• This is for EDUCATIONAL PURPOSES ONLY
• All server IPs and endpoints have been redacted
• DO NOT execute this code
• Use this knowledge responsibly to improve security practices

Purpose

The goal of this project is to:

1. Provide insights into malware techniques targeting Web3 applications
2. Help developers understand potential attack vectors
3. Improve security awareness in the blockchain space

Disclaimer

This code is shared strictly for research and educational purposes. The author takes no responsibility for misuse of this information. Running malware, even in a controlled environment, can be dangerous and potentially illegal.

Legal

This repository is meant for educational purposes only. Any use of this code for malicious purposes is strictly prohibited and may be illegal in your jurisdiction.