During import, the code starts a keylogger and exfiltrates data from cryptowallets.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-random-ua-generator

Reasons (based on the campaign):

• keylogger

• exfiltration-crypto