CoinTelegraph 2025-04-09 02:04:49

Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles

Malicious actors are attempting to steal crypto with malware embedded in fake Microsoft Office extensions uploaded to the software hosting site SourceForge, according to cybersecurity firm Kaspersky. One of the malicious listings, called “officepackage,” has real Microsoft Office add-ins but hides a malware called ClipBanker that replaces a copied crypto wallet address on a computer's clipboard with the attacker's address, Kaspersky’s Anti-Malware Research Team said in an April 8 report. “Users of crypto wallets typically copy addresses instead of typing them. If the device is infected with ClipBanker, the victim’s money will end up somewhere entirely unexpected,” the team said. The fake project’s page on SourceForge mimics a legitimate developer tool page, showing the office add-ins and download buttons and can also appear in search results. Kaspersky said it found a crypto-stealing malware on the software hosting website SourceForge. Source: Kaspersky Kaspersky said another feature of the malware’s infection chain involves sending infected device information such as IP addresses, country and usernames to the hackers through Telegram . The malware can also scan the infected system for signs it’s already been installed previously or for antivirus software and delete itself. Attackers could sell system access to others Kaspersky says some of the files in the bogus download are small, which raises “red flags, as office applications are never that small, even when compressed.” Other files are padded out with junk to convince users they are looking at a genuine software installer. The firm said attackers secure access to an infected system “through multiple methods, including unconventional ones.” “While the attack primarily targets cryptocurrency by deploying a miner and ClipBanker, the attackers could sell system access to more dangerous actors.” The interface is in Russian, which Kaspersky speculates could mean it targets Russian-speaking users. “Our telemetry indicates that 90% of potential victims are in Russia, where 4,604 users encountered the scheme between early January and late March,” the report stated. To avoid falling victim , Kaspersky recommended only downloading software from trusted sources as pirated programs and alternative download options carry higher risks. Related: Hackers are selling counterfeit phones with crypto-stealing malware “Distributing malware disguised as pirated software is anything but new,” the company said. “As users seek ways to download applications outside official sources, attackers offer their own. They keep looking for new ways to make their websites look legit.” Other firms have also been raising the alarm over new forms of malware targeting crypto users. Threat Fabric said in a March 28 report it found a new family of malware that can launch a fake overlay to trick Android users into providing their crypto seed phrases as it takes over the device. Magazine: Bitcoin heading to $70K soon? Crypto baller funds SpaceX flight: Hodler’s Digest, March 30 – April 5

Meist gelesene Nachrichten

Bitcoin Shows Signs of Recovery as Whales Dri...
2025-04-19
Bitcoin Pepe emerging as one of the best memc...
2025-04-19
Whale Address Moves 7,488 ETH to FalconX Afte...
2025-04-19
BTC, XRP, and Solana Are Climbing Fast—But Wi...
2025-04-19
Bitcoin: With 2,106 whale wallets and countin...
2025-04-19
Bitcoin Mega Whales Keep Buying—Is Rest Of Ma...
2025-04-19
Binance India Goes Full Compliance Mode With...
2025-04-19
Could $250 in BTC, XRP, and Ethereum Jump to...
2025-04-19

https://www.digistore24.com/redir/325658/ceobig/

Ähnliche Neuigkeiten

Binance India Enters Full Compliance with Re-Verif...
19 Apr 2025
Pi Network’s New Migration Roadmap: Lags Timeline,...
19 Apr 2025
BTC and XRP Are Gaining Again—But MAGACOINFINANCE...
19 Apr 2025
Kyrgyzstan is Developing Its Own Crypto Hub: A7A5...
19 Apr 2025
Lyn Alden Suggests Bitcoin May Thrive in Condition...
19 Apr 2025
Lyn Alden lowers Bitcoin forecast after ‘tariff ke...
19 Apr 2025

Lesen Sie den Haftungsausschluss : Alle hierin bereitgestellten Inhalte unserer Website, Hyperlinks, zugehörige Anwendungen, Foren, Blogs, Social-Media-Konten und andere Plattformen („Website“) dienen ausschließlich Ihrer allgemeinen Information und werden aus Quellen Dritter bezogen. Wir geben keinerlei Garantien in Bezug auf unseren Inhalt, einschließlich, aber nicht beschränkt auf Genauigkeit und Aktualität. Kein Teil der Inhalte, die wir zur Verfügung stellen, stellt Finanzberatung, Rechtsberatung oder eine andere Form der Beratung dar, die für Ihr spezifisches Vertrauen zu irgendeinem Zweck bestimmt ist. Die Verwendung oder das Vertrauen in unsere Inhalte erfolgt ausschließlich auf eigenes Risiko und Ermessen. Sie sollten Ihre eigenen Untersuchungen durchführen, unsere Inhalte prüfen, analysieren und überprüfen, bevor Sie sich darauf verlassen. Der Handel ist eine sehr riskante Aktivität, die zu erheblichen Verlusten führen kann. Konsultieren Sie daher Ihren Finanzberater, bevor Sie eine Entscheidung treffen. Kein Inhalt unserer Website ist als Aufforderung oder Angebot zu verstehen