TI Mindmap HUB
Threat Intelligence Report

Solidity Pro's WhiteCobra Chassis: Cloudflare C2 to Telegram Infostealer

๐Ÿ“… August 22, 2026 ๐Ÿ“ฐ yeethsecurity.com ๐Ÿ” 0 CVE(s) referenced

A malicious VS Code extension disguised as "Solidity Pro" evolves from a stealthy Cloudflare-based dropper to a sophisticated Telegram infostealer, aggressively targeting crypto developers' wallets, credentials, and secrets while evading detection through heavy obfuscation, publisher churn, and delayed activation.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle