```

according to the Chief Information Security Officer of SlowMist, 23pds forwarded a post exposed by user @Miles082510 on platform X, where developer @web3_cryptoguy disguised as a Web3 "tool author" to provide malicious script tools. This tool will scan the user's local sensitive files in the background, steal key data such as private keys, wallet files, mnemonic words, and upload them to an anonymous server, making the entire process difficult to detect.

SlowMist reminds users to avoid using script tools of unknown origin to prevent asset loss.

```