SourTrade builds malware inside browsers with Bun, sidestepping file‑based detection
Confiant’s report shows the SourTrade campaign delivers only harmless components, then uses the legitimate Bun JavaScript runtime to assemble a Windows executable inside the victim’s browser. This in‑memory construction defeats fingerprint‑based defenses and lets the attackers target retail crypto traders at scale across dozens of countries.