Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Check Point ResearchAugust 31, 2026Threat Intel

Research by: hasherezade Key Points Introduction JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocurrency applications (other vendors also tag it with the names WEEVILPROXY or MeadowLocust).

Summary from Check Point Research.

Read the full article at Check Point Research

Explained

The technology and terms in this story. Learn more

AttackInfostealerMalware that grabs saved passwords, browser cookies and crypto wallets from an infected computer.

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet