Clipper

Read

Cybersecurity analysts have uncovered a new phishing campaign targeting crypto users by deploying FatalRAT alongside Clipper and Keylogger malware. 
Cyble Research and Intelligence Labs have uncovered a novel phishing campaign targeting Chinese crypto investors and organizations, with an emphasis on users of the Exodus crypto wallet. 
In a <a href="https://cyble.com/blog/fatalrats-new-prey-cryptocurrency-users-in-the-crosshairs/" target="_blank" rel="">blog article</a>, the cybersecurity experts revealed that unidentified threat actors have employed a fake website designed to mimic the interface of the Exodus crypto wallet in an effort to trick victims into sharing their private information without realizing it. 
<figure class="wp-block-image size-large">
 <picture loading="lazy" decoding="async" class="wp-image-14265518"> 
 <source type="image/webp" srcset="https://crypto.news/app/uploads/2024/04/wejojweoihj-1024x455.png.webp"> 
 <img loading="lazy" decoding="async" width="1024" height="455" src="https://crypto.news/app/uploads/2024/04/wejojweoihj-1024x455.png" alt="New phishing Exodus campaign targets Chinese crypto investors - 19"> 
 </picture> 
</figure> 
Once unsuspecting users are lured into downloading the software disguised as genuine Exodus installers from the phishing site, they inadvertently install FatalRAT, a type of malware that hackers use to gain control over someone’s computer remotely. Moreover, the program also lures users by starting the Exodus installation, making them think it’s real, while actually diverting their attention to hide its true intentions. 
 You might also like: <a href="https://crypto.news/hackers-target-telegram-and-whatsapp-users-with-trojanized-apps-to-steal-crypto/" rel=""> Hackers target Telegram and WhatsApp users with trojanized apps to steal crypto </a> 
Cyble notes that in addition to the Exodus program, the installer also deploys other malicious components, such as Clipper and Keylogger, programs designed to intercept and modify clipboard data on a victim’s computer. The analysts emphasized that this time, the hackers have employed new .dll side-loading techniques as part of their strategy to evade detection. While it’s not clear how big the attack is, the hackers appear to be targeting Chinese crypto investors and companies with Chinese-language installers, Cyble noted. 
 Read more: <a href="https://crypto.news/chinese-hackers-target-crypto-investors-with-fake-skype/" rel=""> Chinese hackers target crypto investors with fake Skype </a>

New phishing Exodus campaign targets Chinese crypto investors

crypto.news

Other articles published on Apr 15, 2024

Massive Profit Prospect Magnetizes $MEDA Presale Investors Amid Wild Upswing on TON and TAO

How Will Cryptocurrencies Perform in the Current Market?

Reserve Bank of Fiji declares use of Bitcoin and other cryptos illegal

Bitcoin Halving 2024: Nic Carter Analyzes Price Trends, Miner Impact, and BTC’s Future

Solana Mobile Introduces SolMail Upgrades and WUF Tokens

Solana soars 10% after major software upgrade

Join our free newsletter for daily crypto updates!