Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware

What happened

It claimed to support more than 200 portfolio projects and to have raised over $124 million, while promoting founder assessments, security audits, […] The post Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform . It claimed to support more than 200 portfolio projects and to have raised over $124 million, while promoting founder assessments, security audits, job listings and direct investor-relations messaging.

Elastic identified two packages, @apexacc/cli and @apexacc/audit , which advertised an AI coding assistant and an MCP-based Web3 audit suite. A sophisticated campaign in which threat actors (the person or group behind an attack) posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and Gemini credits, AI coding tools and smart-contract security audits.

cyber security Cyber Security News Malware 4 min. Read Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware By Mayura Kathir October 13, 2026 Share Facebook Twitter Pinterest WhatsApp A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and Gemini credits, AI coding tools and smart-contract security audits. Behind the façade, however, the group distributed malicious npm packages designed to install macOS backdoors (a hidden way into a system that bypasses its login) and Windows information stealers.