crypto.news 2025-05-21 11:02:50

Printer exploit reveals new threat to cryptocurrency wallets

MistTrack recently revealed a new threat in the crypto space that steals funds from users’ wallets that comes in the form of a hijacking exploit found within a printer driver. In a recent post , the cybersecurity arm of SlowMist raised awareness regarding a fairly new, yet hard to detect, threat entering the crypto space. Through an installed printer driver, a malicious backdoor program is able to hijack users’ clipboard and replace their copied crypto wallet address with that of the attacker’s. “The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user’s clipboard and replace it with the attacker’s address,” wrote the web3 cybersecurity platform. According to on-chain data from MistTrack, the attacker has stolen at least 9.3086 Bitcoin ( BTC ) from dozens of on-chain addresses. Based on current prices, the stolen funds amount to nearly $1 million or around $989,383. The crypto wallet address has been active since April 22, 2016. Before its recent activities, its last detected on-chain transaction was in March 14, 2024 and is linked to multiple crypto exchanges. You might also like: Frankfurt authorities seize $38.2m from eXch due to money laundering allegations How does the exploit work? Cases of hidden malware exploits, like the one highlighted by MistTrack, occur as a result of attackers distributing malicious code through programs that need to be installed into the user’s hardware, such as a laptop, computer or mobile device. In this case, the attacker inserted the backdoor program through a printer driver that appears legitimate. Once installed, the driver monitors the user’s clipboard—the temporary storage area where copied data is held— in search of a cryptocurrency wallet addresses. If the user copies what appears to be a crypto wallet address in order to send funds, the malware instead replaces it with the attacker’s crypto wallet address. When the user pastes what it believes to be the original crypto wallet address from the clipboard and they fail to notice the hijacked change, the funds are then sent to the attacker’s wallet instead of the intended recipient. A similar exploit was highlighted by CyberArk back in March 2025, which involved a malware called MassJacker. The malware enabled the attacker to access the user’s clipboard to alter the original crypto wallet address and redirect cryptocurrency transactions to attacker-controlled wallets, effectively stealing funds from the victim’s wallet. Unlike the printer driver exploit, MassJacker used more than 750,000 unique addresses instead of a recurring one. The malware was able to infiltrate user’s hardware through pirated and cracked software downloaded from unofficial websites. You might also like: ZKasino scammer wallet lost $27.1m after long position ETH close

La maggior parte ha letto le notizie

CME Group Fuels XRP ETF Hope
2025-05-23
America's Biggest Banks Consider Teaming Up t...
2025-05-23
BITCOIN PRICE ANALYSIS & PREDICTION (May 23)...
2025-05-23
Binance Alpha Cuts Trading Fees to 0.01% for...
2025-05-23
WIF traders should expect a 9% price rally, b...
2025-05-23
MulfinTrade: Flexibility and efficiency
2025-05-23
Singapore Crypto Awareness Hits High Despite...
2025-05-23
Will $2.8B Bitcoin Options Expiry Keep Market...
2025-05-23

Notizie correlate

Bitcoin Breaks Records While Companies Rush to Acq...
23 May 2025
Pictures give glimpse inside Trump’s memecoin hold...
23 May 2025
Malaysia and Singapore are struggling to stay neut...
23 May 2025
SEC Acknowledges Canary Capital’s Staked TRX ETF F...
23 May 2025
Texas Advances Strategic Bitcoin Reserve: Governor...
23 May 2025
Wall Street Giants Join Forces to Launch Regulated...
23 May 2025

Leggi la dichiarazione di non responsabilità : Tutti i contenuti forniti nel nostro sito Web, i siti con collegamento ipertestuale, le applicazioni associate, i forum, i blog, gli account dei social media e altre piattaforme ("Sito") sono solo per le vostre informazioni generali, procurati da fonti di terze parti. Non rilasciamo alcuna garanzia di alcun tipo in relazione al nostro contenuto, incluso ma non limitato a accuratezza e aggiornamento. Nessuna parte del contenuto che forniamo costituisce consulenza finanziaria, consulenza legale o qualsiasi altra forma di consulenza intesa per la vostra specifica dipendenza per qualsiasi scopo. Qualsiasi uso o affidamento sui nostri contenuti è esclusivamente a proprio rischio e discrezione. Devi condurre la tua ricerca, rivedere, analizzare e verificare i nostri contenuti prima di fare affidamento su di essi. Il trading è un'attività altamente rischiosa che può portare a perdite importanti, pertanto si prega di consultare il proprio consulente finanziario prima di prendere qualsiasi decisione. Nessun contenuto sul nostro sito è pensato per essere una sollecitazione o un'offerta