Hackers are being more and more sophisticated. Particularly in the crypto field, hackers can imbed their software and steal information. There is a new malware that can steal from your wallet without you even knowing your wallet has been hacked.
Disabled auto-downloading in Telegram settings to avoid the unaware download of malware and got hacked of your crypto wallet.
Here is a 1 min summary of the article if you want to skip the reading.
This Malware steals private information from users and specifically targets crypto wallets and user accounts credentials. The software may contain multiple credential-stealing functions, domain detection, and computer fingerprinting to collect users’ credentials. It can also screenshot users’ credentials and automatically send them back to hackers. You can read the full report on how the code attack users
Handle @Smokes Night
Telegram group Smokes Night was reported to propagate the malware Echelon and steal credentials from user accounts and crypto-wallets. There are no other incidents revealed in the current time.
Possible places to exploit
According to the report, here are platforms and crypto wallets that potentially be the target:
Exploited Platforms:
- FileZilla
- Outlook
- ProtonVPN
- Psi(Jabber)
- TotalCommander
Aimed Digital Currency Wallets:
AtomicWallet
BitcoinCore
ByteCoin
DashCore
LitecoinCore
Possible upgrade with zero clicking
The current version of software may need to click and install. However, it may evolve into zero-click with auto installation functionality to make a 0 click attack.
What you can do
If you are using Telegram, please turn off the auto-downloading functionality. You can reference how to turn off the auto-downloading
For Android
For web version
In Conclusion
Do not open any suspicious download zip files. Try to have your virus scan software active during your internet connection. Be sure to turn off your auto-download function on any chat apps.
This article is also published in Cryptologist as parnership publication.Photo by Michael Geiger Unsplash
Note: the post was shared on multiple platformsYou can refer my previous article lists
Digital Commodities- the Unlimited Resources of Commodities Has Born
Universal Income in Crypto Way
DeFi 1.0 is Officially Dead - Welcome to DeFi 2.0
How Many Ads Are Too Much - Floki Inu Ads Got Backfire
Bitcoin ATM Adoption and Its Potential Security Vulnerabilities
When Corporations Are Running By Everyone
The Fundamental Value Is Irrelevant
Coinbase At Huge Reputation Crisis
Regulations Start Hitting Crypto Exchanges
From Bitcoin Standard To Zero-Knowledge Proofs - Decentralization 2.0
Shiba Hits 1 Million Users (Army) Milestone: What is Next?
How To Avoid Crypto Scammers
Shiba Game - When Meme Meets Metaverse
Twitter CEO Steps Down - A Full-Time Bitcoiner
Change of Macroeconomy Landscape
CBDC Is Losing The Game
Brief History of Ethereum and How Ethereum 2.0 May Over Promise
Who Cares If Craig Wright Is The Real Satoshi
Institutional Investors vs. Whales
A Proposal To Move Bitcoin Mining PoW Away
IMF Keep Crying Out, Crypto Adoption Keep Accelerating
Dogecoin Is Back to Top 10 But The Moon Shot Is Looming
How to Avoid The New Wallet Scam
Defi Enters To Crypto Bond Phase
What Types of Metaverse You Want
Global Regulations Are Coming Or Can They
-------------------------------------------------------------------------------------Disclosure: The article was written by a delusional author who is possibly a nut job without any questions whatsoever about expertise in the subject matters. You should not believe any words this author wrote or you may experience similar symptoms or even possibly become a nut job.
