Change of address? Beware the latest crypto malware

Image for post
Image for post

We know that crypto is a popular malware target and the cyber criminals are becoming ever more inventive about there methods of stealing your possessions. Now there is a new malware that we want to warn you about, and this one swaps the address you are sending crypto to for the attacker’s address.

The latest method is called ‘Cryptocurrency clipboard hijacking’ and it’s working. According to a report by the Chinese internet security company Qihoo 360, a malware known as ClipboardWalletHijacker infected over 300,000 computers in June. However, the malware only managed to collect $800 worth of Bitcoin. No Ether was stolen.

But, since then the cyber criminals have been working on the malware product and now has the capacity to monitor over 2.3 million crypto addresses, whereas before it could only tackle a maximum of 600,000 addresses, according to Bleeping Computer, a tech site. You’ll find a video at the Bleeping Computer link showing how “the malware takes a cryptocurrency address copied into the Windows clipboard and replaces it with another one under their control. Unless a user double-checks the pasted address, they will have no idea that this swap took place.” It also explains how the malware downloads in Windows when a user logs into their computer.

The problem we all face is that malware like this runs in the background making it tough to spot the infection. That’s why it is important to always have a updated antivirus solution installed to protect you from these types of threats.

You can protect yourself by always double-checking any addresses you have pasted in and are sending crypto to before sending the money. It may be a hassle, but it could prevent you losing your valuable crypto to a hacker, who changed the address sent to you. This way you can spot whether an address has been replaced with a different one than is intended.

Written by

A blockchain platform that will take banking to another level

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store