Kaspersky: Mac malware targets cryptocurrencies

Russia- based cybersecurity firm Kaspersky has issued a public warning about a new malware that specifically targets Mac users, with a focus on their cryptocurrencies. This malware, which infiltrates computers via duplicate applications, creates a backdoor for Bitcoin wallets, including Exodus. It then replaces those wallets with fake versions designed to extract critical information needed to empty the cryptocurrencies stored in them.

See also: Fraudsters earn $50,000 a day impersonating cryptocurrency researchers

Kaspersky warns of cryptocurrency-stealing malware on Mac operating system.

Security firm Kaspersky, a Russian company, has alerted the public to a new malware that targets cryptocurrency wallets installed on Apple. The malware targets computers running Mac operating system version 13.6 or later, focusing on newer devices that are expected to be used by users involved in cryptocurrency.

The malware, distributed via pirated applications, contains an activation application to patch the previously compromised pirated application and run it on the targeted computer. If the patch is not applied, the application will not run.

After gaining administrative rights, the malware scans the computer for installed cryptocurrency wallets, attempting to replace them with compromised applications, with the aim of obtaining the access keys to these applications and extracting the cryptocurrencies contained within them.

See also: KyberSwap: $47 million stolen from blockchain platform

While malware targeting cryptocurrency wallets is not new, Kaspersky explains that the novelty of this software lies in two aspects: the use of DNS records to deliver malicious scripts and the replacement of the wallet application with another infected version. The malware has been observed targeting Bitcoin Core and Exodus wallets in this manner, but it is not known whether it can target other cryptocurrency wallet applications.

Sergey Puzan, a security researcher at Kaspersky, said:

The malware associated with pirated software for the macOS highlights the serious risks. Cybercriminals use pirated applications to easily access users' computers and gain administrator privileges, asking them to enter their password.

Additionally, Puzan advises users to be extra cautious with cryptocurrency wallet apps, recommending avoiding downloading apps from unofficial websites and using security software solutions for better protection.

See also: Crypto scammers abuse Twitter feature to impersonate well-known accounts

What are the best practices for protecting crypto wallets from malware?

• Using antimalware programs is crucial. These programs provide ongoing protection against malware attacks, are regularly updated with new threats, and can detect and remove malware before it can cause damage.
• It's important to keep your operating system and all your applications up to date. Updates often include security fixes that can protect your system from known vulnerabilities that malware can exploit.
• Use a hardware wallet to store your cryptocurrencies. Hardware wallets are devices that store your keys offline, offering an extra layer of protection against online attacks.
• Be careful of email addresses and messages you receive. Many times, malware enters a system through phishing, where attackers try to trick victims into clicking on malicious links.
• Avoid using public Wi-Fi networks when it comes to cryptocurrency transactions. Public networks are often less secure and can expose you to man-in-the-middle attacks.
• Finally, use different, strong passwords for each service you use. This can help protect your information, even if one of your accounts is compromised.

Source: news.bitcoin