ILL BLOOM: INVESTIGATING A WALLET GENERATION VULNERABILITY DURING ACTIVE EXPLOITATION

Summary from the TLDR InfoSec newsletter

Ill Bloom is an active cryptocurrency wallet-draining campaign exploiting a legacy CryptoJS weak-randomness vulnerability in unmaintained downstream dependencies. Defenders should immediately consult the illbloom.org technical disclosure for specific IOCs and affected wallet lists to expedite fund migration.