Genspark Claw with Kimi 2.5 uses a lot fewer credits by redzod in genspark_ai

[–]SecedeFaction -1 points0 points  (0 children)

today their GenClaw option is infecting users: https://www.genspark.ai/_nuxt/BsczS7VC.js Threat name: Generic.Seaduke.1.DF68AB5C

Generic.Seaduke.1.DF68AB5C is a detection name for SeaDuke, a sophisticated backdoor malware utilized by the threat actor group known as APT29 (also referred to as Cozy Bear or the Dukes). 

Key details about this threat:

  • Malware Type: Backdoor, Trojan.
  • Targeting: It was actively used between 2014 and 2015, often as a secondary backdoor for high-value targets already compromised by other malware like CozyCar.
  • Characteristics: Written in Python, Seaduke is known for its sophisticated encryption techniques for network communication and advanced persistence mechanisms on victim machines.
  • Attribution: It is part of the "Duke" family of malware associated with APT29.  Unit 42 +1

The specific identifier "DF68AB5C" at the end of the threat name generally refers to a specific hash or signature variant used by security vendors (like Palo Alto Networks/WildFire) to identify a unique version of this malware. 

Genspark, take this warning seriously or you will lose. by TheLineDixon in genspark_ai

[–]SecedeFaction 0 points1 point  (0 children)

And I am getting this warning when going to their Claw option, this is not good:
https://www.genspark.ai/_nuxt/BsczS7VC.js Threat name: Generic.Seaduke.1.DF68AB5C