Experts have found a trojan able to rig online live betting platforms

Date:
Thu, 23 Jul 2026 18:05:00 +0000

Description:
A company building betting software was targeted with a rather sneaky trojan.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter JFrog found Newtonsoftt.Json.Net, a trojan NuGet package mimicking the popular Newtonsoft.Json library Malware specifically targeted Digitains crashgame backend, rigging outcomes with insider knowledge of its codebase Issue was quickly fixed but attackers remain unidentified Security researchers JFrog have discovered a unique trojan targeting one specific company, while letting everyone else whos infected walk away unharmed.

Named Newtonsoftt.Json.Net, the trojan is a typosquatted NuGet package
variant of the hugely popular JSON library called Newtonsoft.Json. The legitimate package is one of the most-used code libraries in the .NET programming world, needed by almost every project in existence. It is a small piece of software that helps .NET applications read, understand, and exchange data between different systems. According to JFrog, someone published an almost identical package, copied the real authors name, license, and made it work as intended. For almost anyone who installed it, it worked entirely normal. However, for developers working on Digitains crash-game backend, its
a whole different story. Latest Videos From Watch full video here: Rigging
the games Digitain is an Armenian software company providing online sports betting and gaming software platforms to gambling companies around the world.

On the infected machine running Digitains real crash-game code, the malware swaps in a rigged number instead of a fair one, using a formula based on the date and time. You may like Multiple malicious OpenClaw skills found online - including two macOS infostealers OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens Mini Shai-Halud hackers publish over 600 compromised npm packages

What this means is that the results of the gambling game are rigged, allowing the attackers to know, in advance, which rounds are manipulated and place their bets accordingly.

The malware also sets up a private confirmation channel to report back for every rigged round, allowing the attackers to know if the cheat code still works or not. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

JFrog did not identify the attackers, but they did stress that it was most likely an insider.

Apparently, only someone with inside knowledge of Digitains codebase (for example a current or former employee, or a contractor) could have built such an exploit, since it required knowledge of the exact internal function name inside Digitains game engine that decides the crash-game outcome.

The researchers reached out to Digitain on July 7 2026 and were notified, two days later, that the issue had already been escalated to the team and, in the meantime, fixed. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/experts-have-found-a-trojan-able-to-rig -online-live-betting-platforms


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)