What we know
A toolset including an Ethereum RPC node scanner and stealer, along with an RPC node honeypot described as intended to collect attacker information.
Evidence limits
The described behavior comes solely from the repository documentation and has not been independently verified.
Sources and provenance
- lcatro/etherum_rpc_steal repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.