MetaMask-AI/metamask-desktop

This issue exposes a critical security threat targeting cryptocurrency users. The fake MetaMask desktop application, distributed via a deceptive GitHub repository, directly compromises user seed phrases, wallet passwords, browser cookies, and other sensitive data. The use of an 'Unsigned NSIS Electron installer' and a 'hidden native module' for a 'second-stage infostealer' demonstrates sophisticated attack vectors. The '0/67 VirusTotal' detection rate at the time of checking indicates a zero-day or highly evasive threat, underscoring the challenge in detection. This incident highlights significant user education gaps regarding official software distribution channels and the inherent risks of decentralized finance. For B2B SaaS in the security space, this reinforces market demand for advanced threat detection, supply chain security, and user-facing authentication solutions beyond traditional antivirus. The reliance on GitHub for malware distribution also points to broader platform security challenges.