Anyone connected to the internet who browses emails and websites through search engines and social media daily is at risk of encountering such fraudulent traps frequently. For this reason, we always recommend not using your primary computer connected to the internet for any important matters related to crypto. It's better to store crypto in cold storage that is not connected to the internet.
If a fake update is installed through malicious pop-up ads, fake CAPTCHA windows, or software downloaded from unofficial sites, such as YouTube, fake and compromised websites, or through popular messaging apps, the malware mentioned by the OP can easily access and steal any installed wallets and all the assets. The internet is full of all kinds of malware, so it is the responsibility of any beginner to be aware of the seriousness of the matter so that he does not feel bad if he falls into the hands of scammers.
Topic: CoinLurker - another crypto stealing malware (Read 175 times)
I have nothing against Linux or Linux flavored OS, but for the majority, it might be very hard for them to used it as they will take sometime to familiarized themselves and don't get me wrong, it's not user friendly, and I would say that only those who are very much technically incline might used it.
These days there are so many Linux distros that are user friendly and even Windows users can shift to those Linux distros without having any troubles. Windows users can go for Zorin os as that's a pretty use friendly distro for Windows users, and distros like Ubuntu, and Linux mint are also quite user friendly. Using of Linux isn't technical anymore as it used to be in past, but still I agree that most users will still have to learn some technical knowledge before moving to Linux. Especially, the ones who are in crypto should definitely move to Linux. 
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
the majority of people do not pay attention at all. they simply see a prompt like this an click "'install" "yes" "continue" without thinking or verifying what's goin on.
That's true, when they see this Logo, they always assume that it is from Google or whatever apps they are going to update and install. So they just click on it without second thoughts and it's obviously a bad practice in cryptocurrency.
And there's nothing better that doing our on check first before downloading.
Blindly downloading is risky practice, we have seen since the beginning that many individuals have fallen for it. So we need to pay attention, and after that verify. It will just take a couple of minutes in our end to do that.
--snip--
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
You might be well knowledgeable of this things but people out there might be totally ignorant of which company is supposed to publish Google Chrome. Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
In general terms both for well knowledgeable people and others it's best to only install applications from the official website.
I disagree with you this time. After all, name of the publisher is on the name of the browser and where Google Chrome always suggest you to use Google service. Most people should come into conclusion that Google Chrome is created, owned or developed by Google.
--snip--
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
the majority of people do not pay attention at all. they simply see a prompt like this an click "'install" "yes" "continue" without thinking or verifying what's goin on.
Good point, especially if the people got easily annoyed with all notification or pop-up.
Use Linux brother to be safe from such useless malware. The scammers mostly target Windows users and that's why it's better to go with Linux. Linux is much safe as operating system for crypto users than Windows, that's why the OG's always use Linux and they're still safe when it comes to such type of malware.
I have nothing against Linux or Linux flavored OS, but for the majority, it might be very hard for them to used it as they will take sometime to familiarized themselves and don't get me wrong, it's not user friendly, and I would say that only those who are very much technically incline might used it.
And that's why Windows is still the most used OS around the world, very easy for those who want's shortcut.
But in the world that we move in, we should really be vigilant and careful on what we download, not just for our software updates as there are a lot of criminals out there in the wild.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
So all needed is to interact with the Binance smart contract, answer fake CAPTCHA prompts or download updates directly.
But again it collects data so you need to be really careless to lose your money from such attacks.
The link says that it specially look for directories that our crypto might be stored or where the location is.
So if they collect data from your pc or laptop, then they can used it to access everything related to your crypto. And if by chance you have wallets in that exposed machine, then they can steal it under your noise.
Better be cautious when doing our updates as our source might not be the real one.
Use Linux brother to be safe from such useless malware. The scammers mostly target Windows users and that's why it's better to go with Linux. Linux is much safe as operating system for crypto users than Windows, that's why the OG's always use Linux and they're still safe when it comes to such type of malware.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
the majority of people do not pay attention at all. they simply see a prompt like this an click "'install" "yes" "continue" without thinking or verifying what's goin on.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
So all needed is to interact with the Binance smart contract, answer fake CAPTCHA prompts or download updates directly.
But again it collects data so you need to be really careless to lose your money from such attacks.
We can't be careful enough but we can at least try, yes we have to always be in look out for suspicious things on the internet and installing unknown applications or even installing known applications from any source is the way we proudly loss everything we worked for.
If you have to protect yourself then your internet activities must be part of this protection, it's best to be suspicious of every update that pops up and never to install applications fron unknown sites which are not the official websites.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
You might be well knowledgeable of this things but people out there might be totally ignorant of which company is supposed to publish Google Chrome.
In general terms both for well knowledgeable people and others it's best to only install applications from the official website.
If you have to protect yourself then your internet activities must be part of this protection, it's best to be suspicious of every update that pops up and never to install applications fron unknown sites which are not the official websites.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
In general terms both for well knowledgeable people and others it's best to only install applications from the official website.
Looking at this screenshot alone, people should be suspicious since Google Chrome supposed to be developed and published by Google (Alphabet Inc.).
It seems to be a general malware as it does not target Bitcoin and cryptocurrencies but any way that hackers can profit from accessing your device. Using a hot wallet and installing programs randomly is the perfect way to lose your coins.
Thank you for sharing this info.
We should not only be careful during bullrun because scams will not stop or start working during bullrun but anytime and they wait for people to let their guard down.
Be careful in clicking on links from unknown sources, and for beginners never believe in project or coin advertisements that give big returns.
We should not only be careful during bullrun because scams will not stop or start working during bullrun but anytime and they wait for people to let their guard down.
Be careful in clicking on links from unknown sources, and for beginners never believe in project or coin advertisements that give big returns.
Thank you for sharing this update with us. I am always concerned that these are the ones we know. I am concerned that the ones we don't know are far more than the ones that we know. One of the ways to be the safest online with your crypto assets is to have a separate laptop for just your cryptocurrency holdings. You don't use that laptop for any other thing aside from this purpose. This way, the treat is reduced. Are antivirus software able to detect these malwares?
Thanks for the warning, yes, this criminals are using this fake update for many years, but it is just now that they are increasing this kind of attacks. Maybe it's easier for them or they've almost perfected their craft that even AV can't detect them as they've hide the code and so it's hard to detect.
And it's interesting that they are not taking advantage of Smart Chain to concealed everything and then be immutable under our system.
And it's interesting that they are not taking advantage of Smart Chain to concealed everything and then be immutable under our system.
You have said it all in the ending part of your op which is what I wanted to chip in. Staying on alert is key to safeguard oneself from falling victim from these scam schemes. Avoid clicking untrusted sites especially when it's an unofficial site. Taking time to carefully verifying informations and links before clicking is a form of attitude that all crypto users should imbibe. Because it rewarding to delay and do your background check before execution than hurrily falling for cheap scams that could have been easily avoid if you had just given yourself a little time.
A newly discovered malware called CoinLurker was found in the wild recently. Although the modus is not that new, as it uses of fake update alerts to get to their victims.
So another deception method is,
And with that, the obfuscation chain included Binance Smart Contract. Yes, you heard it right, cyber criminals are using BSC and uses it to hide their embedded data. And taking advantage of it, they leverage the immutable properties of blockchain as it is resistance to tampering or removal.
And they look for this crypto wallets,
And
https://blog.morphisec.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates
So again, we just need to be self-aware and this is just a big warning to everyone as the attacks is ramping up as we are entering the bull run. Specially this kind of attacks, about software update that we might see this as legitimate updates.
And only download from the official sites, and verify everything before downloading. Practicing safe habits should be now part of everyone that involves themselves in crypto.
So another deception method is,
- Malvertising Redirects
- Phishing Emails
- Fake CAPTCHA Prompts
- Direct Downloads from Fake or Compromised Sites
- Social Media and Messaging Links
And with that, the obfuscation chain included Binance Smart Contract. Yes, you heard it right, cyber criminals are using BSC and uses it to hide their embedded data. And taking advantage of it, they leverage the immutable properties of blockchain as it is resistance to tampering or removal.
And they look for this crypto wallets,
- Bitcoin\wallets
- Ethereum\keystore
- Ledger Live\Local Storage\leveldb
- Exodus\exodus.wallet
And
Quote
Alternative Cryptocurrencies and Lesser-Known Wallets:
Examples include BBQCoin, Lucky7Coin, MemoryCoin, and many others, showcasing its effort to cover a wide range of cryptocurrencies.
Examples include BBQCoin, Lucky7Coin, MemoryCoin, and many others, showcasing its effort to cover a wide range of cryptocurrencies.
https://blog.morphisec.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates
So again, we just need to be self-aware and this is just a big warning to everyone as the attacks is ramping up as we are entering the bull run. Specially this kind of attacks, about software update that we might see this as legitimate updates.
And only download from the official sites, and verify everything before downloading. Practicing safe habits should be now part of everyone that involves themselves in crypto.
Jump to: