🚨 ALERT: Information-stealing malware AMOS and Lumma, disguised as cracked versions of TradingView, have been spread through Reddit posts targeting crypto users to steal personal data and crypto wallets, per Malwarebytes.

#malware #cryptohack #tradingview #crypto

🚨 ALERT: Microsoft has discovered a new trojan, StilachiRAT, targeting #cryptocurrency wallets in the Google Chrome browser.

The malware attacks 20 different extensions, including MetaMask, Coinbase Wallet, Trust Wallet, OKX Wallet, Bitget Wallet, Phantom, and more.

🚨🚨🚨 New Cryptojacking Malware MassJacker Targets Cryptocurrency Transactions

A new type of crypto-jacking malware known as MassJacker is targeting users who download pirated software. The malware hijacks #cryptocurrency transactions by replacing stored addresses. The malware originates from the website pesktop[dot]com, where unsuspecting users may inadvertently infect their devices. Once installed, MassJacker swaps out crypto addresses stored on the clipboard application for those controlled by the attacker.

CyberArk reports that 778,531 unique wallets are linked to the theft, with only 423 holding crypto assets, totaling approximately $336,700 as of August. Notably, one wallet contained over 600 Solana (SOL) worth around $87,000 and had a history of holding NFTs like Gorilla Reborn and Susanoo. An analysis revealed 1,184 transactions since March 11, 2022, and the wallet's owner engaged in decentralized finance activities in November 2024, swapping tokens such as Jupiter (JUP), Uniswap (UNI), USDC, and Raydium (RAY).

Cryptocurrency malware has been around since Coinhive released the first cryptojacking script in 2017. In February 2025, Kaspersky Labs found malware in app-making kits for Android and iOS that could scan images for crypto seed phrases. In October 2024, Checkmarx discovered crypto-stealing malware in the Python Package Index. Other malware has also targeted macOS devices.

#MassJacker #crypto #cryptocurrency #malware #Jupiter #Uniswap #USDC #nft #Cryptojacking #hacked