ពួក Hacker បានផ្សព្វផ្សាយមេរោគ PennyWise crypto malware តាមរយៈ YouTube

Hackers are using YouTube to spread a new type of crypto-malware. This malware duped users into downloading software that steals data from cryptocurrency wallets and crypto browser extensions.

PennyWise crypto malware spread on YouTube

Cyble published a ប្រកាសកំណត់ហេតុបណ្ដាញ on June 30 addressing this new malware known as PennyWise. The blog post noted that the malware was an “emerging threat.” A threat actor using this malware can gain access to more than 30 cryptocurrency applications, including crypto wallets and browser extensions.

The hackers can use this malware to access a wide range of system data, including login information and crypto extension data. The malware can also capture screenshots and infiltrate chat platforms like Telegram and Discord.

This malware can infiltrate many cold wallets, including Atomic Wallet, Armory, Bytecoin, Coinomi, Electrum, Exodus, Guarda, and Jaxx. Wallets used for Ethereum and Zcash are also vulnerable to this malware.

ទិញ Bitcoin ឥឡូវនេះ

ដើមទុនរបស់អ្នកប្រឈមនឹងហានិភ័យ។

Cyble added that the hackers are using YouTube to deploy this malware. The hackers are posting videos to educate viewers about free software used for Bitcoin mining. They attach a link on the description urging the users to follow it and access the software. Users are even urged to uninstall antivirus software to allow the malware to be deployed.

While the channel has since been removed from YouTube, it is estimated that the attackers had quite a reach, given that they had posted around 80 videos on the channel. Moreover, the malware is still being circulated by other channels purporting to offer free NFT mining and other free software services.

The report further showed that the malware automatically disabled itself once it detected that the victim was located in Belarus, Kazakhstan, Russia, and Ukraine. The blog post also said that the malware changed the timezone data to depict Russian Standard Time (RST) after the data was sent back to the attacker.

Malware in the crypto space

This is not the first time malware targeting the crypto space has been detected. Earlier this year, malware known as Mars Stealer was detected after targeting cryptocurrency wallets that rely on the Chromium browser extensions, including Binance Chain Wallet, Coinbase, and MetaMask.

In January, Chainalysis warned that malware was even being spread by cybercriminals with no expert skills. Between 2017 and 2021, cryptojacking accounted for 73% of the value received from malware addresses.

អាន​បន្ថែម:

Lucky Block - គ្រីបតូដែលបានណែនាំរបស់យើងក្នុងឆ្នាំ 2022

• វេទិកាហ្គេមគ្រីបតូថ្មី។
• មានលក្ខណៈពិសេសនៅក្នុង Forbes, Nasdaq.com, Yahoo Finance
• LBLOCK Token Up 1000%+ ពីការលក់មុន។
• បានចុះបញ្ជីនៅ Pancakeswap, LBank
• សំបុត្រឥតគិតថ្លៃសម្រាប់ការចាប់រង្វាន់ Jackpot សម្រាប់អ្នកកាន់
• រង្វាន់ប្រាក់ចំណូលអកម្ម - លេងដើម្បីទទួលបានឧបករណ៍ប្រើប្រាស់
• 10,000 NFTs ដែលត្រូវបានលុបចោលក្នុងឆ្នាំ 2022 - ឥឡូវនេះនៅលើ NFTLaunchpad.com
• $1 លានដុល្លារ NFT Jackpot ក្នុងខែឧសភា ឆ្នាំ 2022
• ការប្រកួតវិមជ្ឈការទូទាំងពិភពលោក

Cryptoassets គឺជាផលិតផលវិនិយោគដែលមិនមានការគ្រប់គ្រងដែលងាយនឹងបង្កជាហេតុ។ គ្មានការការពារវិនិយោគិនចក្រភពអង់គ្លេស ឬសហភាពអឺរ៉ុបទេ។