Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.
Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.
Sergey Yunakovsky, a malware analyst at Kaspersky Lab, said:
“Cryptocurrency is not a far-off technology anymore. Lately, we have observed an increase in malware attacks targeting different types of cryptocurrencies and we expect this trend to continue.”
As per the experts, cybercriminals are using old and less advanced techniques while spending very little time and resources in this area. The pattern of attacks suggest a clipboard hijacking attacks which are carried out since years that direct a user to any third malicious website while targeting online payment systems.
For a user to transfer his/her crypto coins to any other users, the recipients wallet ID which is a unique multi-digit number has to be known. The CryptoShuffler Trojan targets the system operating with this ID. Once it gets initilized, the trojan than starts to monitor the clipboard that is utilized by users for making a payment. After this, it (Trojan) will start copying wallet numbers and paste them to “destination address” in the software that is used for carrying out a transaction.
In the destination address line the Trojan will than replace the the user’s wallet-ID with its own. If any user misses to spot this sudden change, he/she will end up transferring the amount to the malware address.
With a tremendous increase in retail investor participation for investing in virtual digital currencies, cybercriminals have turned quite a lot active and targeting new and novice investors in this field. It is advised that before performing any action like money transferring or other transactions, user make themselves enough knowledgeable about the process as well maintain the security of the device they using.
Get latest Cryptocurrency news and updates on KryptoMoney.com
Subscribe to our newsletters and join our Telegram Channel to stay updated