digital storage

A victim lost over ,000 in cryptocurrency due to a malware attack that bypassed Microsoft Defender. The attacker persuaded the victim to download a malicious application disguised as a game called Orbit Unit via Telegram. The malware accessed the victim's Google passwords through an unlocked Bitwarden, compromising his cryptocurrency wallet. Despite having Malwarebytes installed, it did not provide real-time protection, only identifying the malware after the damage was done. Researchers confirmed that Microsoft Defender failed to block the malware or detect it once operational. The malware used PowerShell to execute scripts and installed a deceptive Chrome extension to steal credentials and manipulate browser activity. In tests, Malwarebytes with real-time protection blocked the malware, while Bitdefender prevented access to sensitive information. The malware did not execute if the user was located in Russia, Ukraine, or Belarus. SafetyDetectives advised against storing wallet passwords digitally and recommended using reputable antivirus software with real-time protection. They also suggested limiting cryptocurrency in browser wallets and using hardware wallets for significant amounts.