Auditing the auditor: Unmasking Apex Accelerator

Elastic Security LabsOctober 12, 2026Threat Intel Governance

REF8801 exposes how Apex Accelerator combines convincing Web3 services with malicious npm packages, attacker-controlled AI infrastructure, and cross-platform malware delivery.

Summary from Elastic Security Labs.

Read the full article at Elastic Security Labs

Explained

The technology and terms in this story. Learn more

TechnologynpmThe package registry for JavaScript: millions of open-source libraries that projects install automatically.

Auditing the auditor: Unmasking Apex Accelerator

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet