Researchers warn 3 apps have been stealing crypto undetected for a year

Martin Young

4 hours ago

Researchers warn 3 apps have been stealing crypto undetected for a year

Three crypto based apps have concealed a nasty surprise for those that have downloaded them.

14967 Total views

33 Total shares

Listen to article

0:00

News

Cyber security researchers have discovered a year-long malware operation that has targeted cryptocurrency users with the creation of a number of fake apps.

Security firm Intezer Labs warned that ever increasing crypto prices have created heightened activity among hackers and malicious actors seeking financial gains. The malware has been disseminated over the past year, but was only discovered in December 2020.

The new remote access trojan (RAT), dubbed ElectroRAT, has been used to empty the cryptocurrency wallets of thousands of Windows, macOS, and Linux users, the report added.

Three cryptocurrency-related apps deployed in the attack — Jamm, eTrade/Kintum, and DaoPoker — were all hosted on their own websites. The first two are bogus crypto trading apps while the third is gambling based.

The ElectroRAT malware hidden inside these apps is extremely intrusive according to the researchers;

“It has various capabilities such as keylogging, taking screenshots, uploading files from disk, downloading files, and executing commands on the victim's console.”

After being launched on a victim's computer, the apps show a foreground user interface designed to divert attention from the malicious background processes. The apps were promoted using social media platforms Twitter and Telegram in addition to cryptocurrency based forums such as Bitcointalk.

Intezer Labs estimated that the campaign has already infected “thousands of victims” who have had their crypto wallets emptied. It added that there was evidence that some victims who were compromised by the apps were using popular crypto wallets such as MetaMask.

The malware has been written in a multi-platform programming language called Golang which makes it harder to detect. The security firm stated that it was uncommon to see a RAT designed to steal personal information from cryptocurrency users that was written from scratch, adding;

“It is even rarer to see such a wide-ranging and targeted campaign that includes various components such as fake apps and websites, and marketing/promotional efforts via relevant forums and social media.”

There have been a number of cases in 2020 where fake versions of legitimate apps and browser extensions such as MetaMask or Ledger have made their way onto victims computers. This may be related to Ledger's massive data breach in mid-December.

In September 2020, Coinbase users were among the victims of new Android-based malware disseminated through Google Play Store.

• #Technology
• #Malware

Related News

• ETH Miners Will Have Little Choice Once Ethereum 2.0 Launches With PoS

• Crypto exchange vows to tackle the industrys biggest challenge

• Enterprise blockchain trends that will drive adoption in 2021

• Demystify 2021 with crypto trend predictions from the Cointelegraph crew

• CeFi and DeFi will finally meet in 2021 — Let's hope they hit it off

• These 2020 blockchain tech developments have set the stage for 2021

Loading

Editors Choice

• Ethereum bursts into list of top 100 assets in the world by market cap
• ETH en route to overtake its 2018 ATH as Bitcoin breaks $37K
• YouTube star Mr Beast, with 50M subscribers, becomes a verified Brave browser publisher
• Researchers warn 3 apps have been stealing crypto undetected for a year
• Bitcoiner loses almost $100K of BTC in wallet transfer bungle

Cointelegraph YouTube Subscribe

Advertise with us

Bitcoin BTC/USD

37,327.40 +7.42%

Ethereum ETH/USD

1,204.96 +8.77%

Litecoin LTC/USD

169.09 +4.86%

Ripple XRP/USD

0.30 +33.67%

EOS EOS/USD

3.34 +14.45%