- Kaspersky identified a malware disguised as a Microsoft Office plugin on SourceForge.
- The malware is programmed to use the attacker’s wallet address instead of the user’s wallet address and steal their crypto.
Kaspersky firm identified a malware in SourceForge that is stealing cryptocurrency from users’ wallet addresses. It alerted the crypto community today, stating that the malware is present as Microsoft’s plugin. The incident reminds crypto users to employ security practices while transferring cryptocurrencies.
Kaspersky is a seasoned cybersecurity firm that keeps an eye on malicious actors and offers antivirus software. The firm’s latest malware finding came to light when a crypto news media outlet posted it on X earlier today.
The malware is disguised as a Microsoft Office plugin on the SourceForge website. It tricks victims into sending their cryptocurrencies to the attacker’s wallet address. The malware installs a ClipBanker on the device, and it replaces the user’s wallet address with the attacker’s on the clipboard.
Most of the crypto users copy their wallet addresses and paste them when making a crypto transfer. This attacker took this activity to his advantage and replaced the address with his own. If users execute crypto transactions without verifying their address, funds will go to the attacker’s address.
Kaspersky Alerts Crypto Community With Russian Malware Detection
A blog post from Secure List by Kaspersky detailed the issue and explained how the malware works. The coding of this malware is Russian, which suggests the attacker hails from Russia. Kaspersky’s findings also revealed that 90% of the victims are Russian, and most of the incidents took place between January and March this year.
The firm advised users,
“We advise users against downloading software from untrusted sources. If you are unable to obtain some software from official sources for any reason, remember that seeking alternative download options always carries higher security risks.”
The decentralized nature, along with the lack of clear regulations, is causing most of the crypto thefts and scams. Users must be careful when making crypto transactions and verify the public and private addresses multiple times before executing a transaction.
Highlighted Crypto News Today:
Aave Kicks Off $4M Token Buyback, Backed by Over 99% Community Support
