Kaspersky disclosed OkoBot, a malware framework targeting crypto investors since January 2026. The malware uses social engineering and trojanized GitHub applications to steal wallet files, browser data, credentials, and assets.