QuickNode

Reported Context (2)

Multiple providers' live paid RPC and analytics API keys (Helius, QuickNode, and similar) were extracted from client-side bundles and confirmed working against production. CloudSEK Finds AI-Agent-Driven Campaign Behind 12,000 WordPress Backdoors and Crypto Theft
cluster interacts with the Polygon blockchain by querying various public RPC endpoints, mainly Quicknode. Several wallet addresses are used, according to the deployed ErrTraffic framework, to retrieve C2 ErrTraffic ClickFix Framework Uses Blockchain to Hide C2 and Deliver Malware

CVE (1)

Malware (10)

People (2)

Threat Actors (15)

MITRE ATT&CK (28)

Vendors (3)

Products (19)

Tools (16)

Industries (5)

Countries (12)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.