United

Bitcoin

Discord

Glitch

<a href="https://bitcoinworld.co.in/new-malware-uses-pirated-apps-on-macos-to-hijack-crypto-wallets/" title="New Malware Uses Pirated Apps On MacOS To Hijack Crypto Wallets" rel="noopener noreferrer nofollow"></a>
Kaspersky Labs has found new malware that enters macOS users’ computers through pirated apps and replaces their hot Bitcoin and <a href="https://twitter.com/exodus_io/status/1749504246712562106" rel="noopener noreferrer nofollow">Exodus</a> wallets with infected versions.&nbsp;
According to the researchers, the hackers are still developing the malware in preparation for a new campaign.
Researchers uncovered a “family” of new trojan proxies in December. Hackers were compromising, or “cracking,” legitimate apps that users downloaded the app unauthorized sources along with the malware:
“Cybercriminals […] realize that an individual looking for a cracked app will be willing to download an installer from a questionable website and disable security on their machine, and so they will be fairly easy to trick into installing malware as well.”
The malware targets macOS versions 13.6 and above.&nbsp;
See Also: <a class="row-title" href="https://bitcoinworld.co.in/evernode-built-on-xrp-ledger-encounters-node-glitch-shortly-after-launch/" aria-label="“Evernode, Built On XRP Ledger, Encounters Node Glitch Shortly After Launch” (Edit)" rel="noopener noreferrer nofollow">Evernode, Built On XRP Ledger, Encounters Node Glitch Shortly After Launch</a>
The hackers gain access to a user’s computer security password when the user enters it into an activator box and to the private keys to crypto wallets when the user tries to open crypto wallets compromised by the malware.
The malware itself was being written as researchers traced it, they observed. Although the method is basic, the malware itself was “seriously ingenious,” the researchers said.&nbsp;
As a result:
“The final payload was a backdoor that could run any scripts with administrator privileges, and replace Exodus and Bitcoin cryptowallet applications installed on the machine with infected versions that stole secret recovery phrases the moment the wallet was unlocked.”
The unfolding malware campaign can be avoided by using trusted websites, keeping the computer’s operating system updated and using a security solution on it, Kaspersky reminded.
Other techniques used by hackers include disguising malware as a legitimate wallet on online stores or fake websites.&nbsp;
That activity has become so common that the United States Federal Bureau of Investigation issued a warning about it.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Hey, all! We want to talk about some scams that have been on the rise recently, how to recognize them, and what to do if you're targeted.
 Social engineering is the new hotness in the world of scams. An attacker may approach the victim, build trust with them, and offer a trade or…
 — Exodus – Crypto Wallet (@exodus_io) <a href="https://twitter.com/exodus_io/status/1749504246712562106?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 22, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
In November, the North Korean Lazarus Group of hackers created malware that targeted macOS users in the decentralized finance community that circulated in Discord groups.
The post <a href="https://bitcoinworld.co.in/new-malware-uses-pirated-apps-on-macos-to-hijack-crypto-wallets/" rel="noopener noreferrer nofollow">New Malware Uses Pirated Apps On MacOS To Hijack Crypto Wallets</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

New Malware Uses Pirated Apps On MacOS To Hijack Crypto Wallets

ItsBitcoinWorld

Other articles published on Jan 23, 2024

Expert Foresees Rapid BTC Surge to $1 Million; Borroe Finance Will Overtake Chainlink in 2024

TUSD Depegged Following Removal From Binance Launchpools

Cardano’s rising volume may be ADA’s greatest undoing – How?

Waves Facilitates Token Creation and Supports Waves Wallet

Pushd (PUSHD) just three weeks old gains almost 20,000 sign ups to its presale. Ethereum (ETH) an...

Ripple fights SEC's sneaky post-complaint tactics in XRP lawsuit

Join our free newsletter for daily crypto updates!