Heimadal Security

NOVEMBER 9, 2022

Cryptocurrency users are once again threatened by cyberattacks, this time in the shape of a new clipper malware strain called Laplas, deployed via SmokeLoader. Researchers claim they have identified more than 180 different samples related to the clipper malware in the last two weeks, suggesting a wide scale deployment.

Cryptocurrency 101

Cryptocurrency Malware Phishing Cybersecurity 101

Graham Cluley

JULY 26, 2023

Fake blockchain games, that are being actively promoted by cybercriminals on social media, are actually designed to infect the computers of unsuspecting Mac users with cryptocurrency-stealing malware.

Cryptocurrency 86

Cryptocurrency Malware Media 86

Schneier on Security

JANUARY 23, 2018

After gaining control of the coin-mining software, the malware replaces the wallet address the computer owner uses to collect newly minted currency with an address controlled by the attacker. This is a clever attack.

Cryptocurrency 274

Cryptocurrency Malware Software Scams 274

The Hacker News

JUNE 6, 2023

A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers.

Cryptocurrency 77

Cryptocurrency Malware Accountability 77

The Hacker News

MARCH 17, 2023

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. While the first instance of

Cryptocurrency 85

Cryptocurrency Malware 85

Penetration Testing

MARCH 31, 2024

The package, named “vue2util,” sneakily executes a sophisticated scheme designed to drain USDT tokens from... The post ‘Trojanized’ npm Package Targets Cryptocurrency Wallets, Steals USDT appeared first on Penetration Testing.

Cryptocurrency 106

Cryptocurrency Penetration Testing Malware 106

Heimadal Security

APRIL 5, 2023

Researchers discovered a new malware that fakes legitimate Google Drive extensions to inject malicious scripts and steal cryptocurrency. The new Rilide malware targets Chromium-based browsers like Google Chrome, Microsoft Edge, Brave, and Opera.

Cryptocurrency 83

Cryptocurrency Malware Cybersecurity 83

Schneier on Security

APRIL 4, 2023

News : Researchers at Russian cybersecurity firm Kaspersky today revealed that they identified a small number of cryptocurrency-focused firms as at least some of the victims of the 3CX software supply-chain attack that’s unfolded over the past week.

Cryptocurrency 185

Cryptocurrency Hacking Software Cybersecurity 185

Heimadal Security

AUGUST 4, 2021

Raccoon malware, a commonly-used information stealing virus that’s being sold as a service, has received several upgrades from its creator to add tools in order to extract cryptocurrency from users’ devices. What Is Raccoon Malware?

Cryptocurrency 128

Cryptocurrency Malware Cybersecurity 128

The Hacker News

APRIL 11, 2023

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting.NET developers.

Cryptocurrency 84

Cryptocurrency Malware Cybersecurity 84

Security Affairs

DECEMBER 4, 2022

The North Korea-linked Lazarus APT spreads fake cryptocurrency apps under the fake brand BloxHolder to install the AppleJeus malware. Volexity researchers warn of a new malware campaign conducted by the North Korea-linked Lazarus APT against cryptocurrency users. ” reads the report published by Volexity.

Cryptocurrency 86

Cryptocurrency Malware Hacking Information Security 86

The Hacker News

FEBRUARY 16, 2024

Several companies operating in the cryptocurrency sector are the target of a newly discovered Apple macOS backdoor codenamed RustDoor. RustDoor was first documented by Bitdefender last week, describing it as a Rust-based malware capable of harvesting and uploading files, as well as gathering information about the infected machines.

Cryptocurrency 103

Cryptocurrency Malware 103

Bleeping Computer

APRIL 10, 2024

Threat actors are abusing GitHub automation features and malicious Visual Studio projects to push a new variant of the "Keyzetsu" clipboard-hijacking malware and steal cryptocurrency payments. [.]

Malware 100

Malware Cryptocurrency 100

Security Affairs

FEBRUARY 13, 2023

Alleged Russian threat actors have been targeting cryptocurrency users in Eastern Europe with Enigma info-stealing malware. A malware campaign conducted by alleged Russian threat actors has been targeting users in Eastern European in the crypto industry. The files pose an interview for a fake cryptocurrency role or job opening.

Cryptocurrency 77

Cryptocurrency Malware Media Phishing 77

The Hacker News

APRIL 5, 2023

Portuguese users are being targeted by a new malware codenamed CryptoClippy that's capable of stealing cryptocurrency as part of a malvertising campaign. CryptoClippy, a C-based executable, is a type

Cryptocurrency 77

Cryptocurrency Malware 77

Malwarebytes

SEPTEMBER 27, 2023

Cryptocurrency owners should take heed of warnings related to Xenomorph malware—Bleeping Computer reports that the most recent version of Xenomorph now targets various cryptocurrency wallets using fake browser update messaging as bait. This on its own is already very malicious behaviour.

Cryptocurrency 105

Cryptocurrency Scams Malware Banking 105

Graham Cluley

MARCH 30, 2023

Malware, disguised as copies of Tor, has stolen approximately US $400,000 worth of cryptocurrency from almost 16,000 users worldwide.

Cryptocurrency 82

Cryptocurrency Malware 82

The Hacker News

MARCH 20, 2024

Cybersecurity researchers have discovered an updated variant of a stealer and malware loader called BunnyLoader that modularizes its various functions as well as allow it to evade detection.

Malware 110

Malware Cryptocurrency Cybersecurity 110

Heimadal Security

JUNE 17, 2022

The post New MaliBot Android Malware Mines Cryptocurrency appeared first on Heimdal Security Blog. The operators are granted the ability to travel between displays through VNC, as well as a scroll, take screenshots, copy and paste material, swipe, and conduct long pushes. In addition, the […].

Cryptocurrency 90

Cryptocurrency Malware Cybersecurity 90

The Hacker News

FEBRUARY 23, 2023

Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems. This malware makes use of the Invisible Internet Project (i2p) [.] to download

Cryptocurrency 93

Cryptocurrency Malware Internet Internet 93

The Hacker News

JANUARY 4, 2023

A new Linux malware developed using the shell script compiler (shc) has been observed deploying a cryptocurrency miner on compromised systems. "It

Cryptocurrency 97

Cryptocurrency Malware Authentication 97

The Hacker News

DECEMBER 5, 2022

The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus malware, according to new findings from Volexity.

Cryptocurrency 83

Cryptocurrency Malware 83

Tech Republic Security

DECEMBER 16, 2021

The botnet uses a tactic called crypto clipping, which relies on malware to steal cryptocurrency during a transaction, says Check Point Research.

Cryptocurrency 209

Cryptocurrency Malware 209

The Hacker News

APRIL 4, 2023

Chromium-based web browsers are the target of a new malware called Rilide that masquerades itself as a seemingly legitimate extension to harvest sensitive data and siphon cryptocurrency.

Cryptocurrency 79

Cryptocurrency Malware 79

Bleeping Computer

FEBRUARY 7, 2024

A new password-stealing malware named Ov3r_Stealer is spreading through fake job advertisements on Facebook, aiming to steal account credentials and cryptocurrency. [.]

Passwords 125

Passwords Malware Cryptocurrency Advertising 125

Penetration Testing

FEBRUARY 15, 2024

Since then, it has developed to be one of the most widespread families of malware for Android, with many samples, integration of other RATs... The post SpyNote RAT Evolves: Targets Your Cryptocurrency Wallet appeared first on Penetration Testing. Spynote is a Remote Access Trojan that originated in 2020.

Cryptocurrency 76

Cryptocurrency Penetration Testing Malware 76

Security Boulevard

OCTOBER 20, 2021

Sonatype’s automated malware detection system has caught multiple malicious packages on the npm registry this month. The post Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices appeared first on Security Boulevard.

Cryptocurrency 122

Cryptocurrency Malware 122

Penetration Testing

APRIL 11, 2024

Cryptocurrency enthusiasts are being urged to exercise extreme caution after a new phishing campaign was uncovered by cybersecurity researchers at Cyble Research and Intelligence Labs (CRIL).

Cryptocurrency 71

Cryptocurrency Phishing Penetration Testing Cybersecurity 71

Malwarebytes

DECEMBER 5, 2022

Now, researchers at Volexity have analyzed a new campaign that is likely targeting cryptocurrency users and organizations with a variant of the AppleJeus malware by using malicious Microsoft Office documents. One of the group's preferred tactics is to use trojanized cryptocurrency related apps, like AppleJeus. Lazarus Group.

Cryptocurrency 84

Cryptocurrency Malware Scams Cybercrime 84

The Hacker News

FEBRUARY 23, 2023

An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and abuse the systems' resources to mine cryptocurrency.

Cryptocurrency 82

Cryptocurrency Accountability Malware Media 82

Bleeping Computer

APRIL 3, 2023

Some of the victims affected by the 3CX supply chain attack have also had their systems backdoored with Gopuram malware, with the threat actors specifically targeting cryptocurrency companies with this additional malicious payload. [.]

Cryptocurrency 115

Cryptocurrency Malware 115

The Hacker News

MARCH 29, 2022

An unidentified threat actor has been observed employing a "complex and powerful" malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens.

Cryptocurrency 92

Cryptocurrency Malware Hacking Software 92

Security Affairs

APRIL 13, 2024

Researchers warn threat actors are manipulating GitHub search results to target developers with persistent malware. Checkmarx researchers reported that t hreat actors are manipulating GitHub search results to deliver persistent malware to developers systems. Merely checking for known vulnerabilities is insufficient.

Malware 105

Malware Cryptocurrency Encryption Hacking 105

Penetration Testing

MARCH 11, 2024

A dangerous new malware named Planet Stealer is making its rounds in the cybercriminal underworld, and security experts warn that your passwords, cryptocurrency wallets, and other sensitive information could be in its sights.

Passwords 106

Passwords Penetration Testing Malware Risk 106

The Hacker News

NOVEMBER 8, 2022

Cryptocurrency users are being targeted with a new clipper malware strain dubbed Laplas by means of another malware known as SmokeLoader. SmokeLoader, which is delivered by means of weaponized documents sent through spear-phishing emails, further acts as a conduit for other commodity trojans like SystemBC and Raccoon Stealer 2.0,

Cryptocurrency 74

Cryptocurrency Malware Phishing 74

Heimadal Security

DECEMBER 8, 2021

The post QNAP NAS Devices Targeted Now by Another Cryptocurrency Mining Malware appeared first on Heimdal Security Blog. Customers are required to implement […].

Cryptocurrency 88

Cryptocurrency Malware Manufacturing Software 88

Graham Cluley

NOVEMBER 10, 2023

CherryBlos is a rather interesting family of Android malware that can plunder your cryptocurrency accounts - with a little help from your photos. Read more in my article on the Tripwire State of Security blog.

Cryptocurrency 52

Cryptocurrency Malware Accountability Phishing 52