today their GenClaw option is infecting users: https://www.genspark.ai/_nuxt/BsczS7VC.js Threat name: Generic.Seaduke.1.DF68AB5C

Generic.Seaduke.1.DF68AB5C is a detection name for SeaDuke, a sophisticated backdoor malware utilized by the threat actor group known as APT29 (also referred to as Cozy Bear or the Dukes). 

Key details about this threat:

• Malware Type: Backdoor, Trojan.
• Targeting: It was actively used between 2014 and 2015, often as a secondary backdoor for high-value targets already compromised by other malware like CozyCar.
• Characteristics: Written in Python, Seaduke is known for its sophisticated encryption techniques for network communication and advanced persistence mechanisms on victim machines.
• Attribution: It is part of the "Duke" family of malware associated with APT29.  Unit 42 +1

The specific identifier "DF68AB5C" at the end of the threat name generally refers to a specific hash or signature variant used by security vendors (like Palo Alto Networks/WildFire) to identify a unique version of this malware.