cryptocurrency theft Archives

Tech Optimizer

April 8, 2025

Highly Dangerous New Malware Can Destroy Windows PCs, Steal Passwords And Crypto

Neptune RAT is a Remote Access Trojan that allows attackers to take control of vulnerable systems. It features a built-in crypto clipper that intercepts and modifies cryptocurrency transactions, redirecting funds from victims to hackers. The RAT can extract login credentials from over 270 applications, including web browsers like Chrome, increasing the risk of identity theft and financial loss. It can deploy ransomware to lock files and demand a ransom for their release. Neptune RAT can disable antivirus software, leaving systems vulnerable. It also enables real-time screen monitoring to spy on users, capturing sensitive information. In severe cases, it can execute a destruction option, potentially obliterating the victim's computer system.

TrendTechie

March 17, 2025

Новый вирус стал атаковать криптокошельки пользователей ПК

Cybersecurity experts from CyberArk have identified a new malware strain called MassJacker, which targets users who download unauthorized software to steal cryptocurrency. MassJacker is categorized as a "clipper" that alters clipboard data, replacing a user's cryptocurrency wallet address with a hacker's address during transactions. The attack often starts from a website posing as a free software download platform. Upon downloading, the Amadey virus first infiltrates the computer, followed by MassJacker, which disguises itself as a legitimate Windows process and uses encryption and command spoofing to avoid detection. Research shows that cybercriminals have created over 778,000 wallets for cryptocurrency theft, with 423 wallets accumulating approximately ,000, leading to potential total losses of around ,000. MassJacker shares similarities with another malware variant, MassLogger, but the identities of the attackers remain unknown.

AppWizard

October 1, 2024

Android users, delete this ‘dangerous’ crypto app from your phones – Times of India

A cybersecurity firm identified a malicious application called WalletConnect – Airdrop Wallet in the Google Play Store, designed to steal cryptocurrency from users. The app evaded detection for over five months after its introduction in March 2024, targeting Android users and employing evasion techniques to appear legitimate. It exploited the credibility of the WalletConnect protocol and siphoned approximately ,000 (around 58.6 lakh) in cryptocurrency from victims. The app achieved over 10,000 downloads by using fake positive reviews and advanced crypto drainer toolkits to manipulate search rankings. Users were misled into connecting their wallets and directed to phishing sites, resulting in unauthorized transactions. Despite some negative reviews, the developers countered with fake positive feedback to maintain the app's appearance of legitimacy.