China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

Jewelbug runs espionage and cryptocurrency fraud operations, says Symantec

Jewelbug, a Chinese hacker group, simultaneously conducts government espionage and cryptocurrency fraud via shared C2 infrastructure, exfiltrating 580k+ cookies through clipboard-swapping malware. The convergence of state-level surveillance with financial crime—monetizing the same implants for both espionage and crypto theft—redefines threat modeling for organizations managing sensitive government access or blockchain assets.