Malware Disguised As Legitimate Software Infects Over 28,000 Users

According to BlockBeats, on October 10, cybersecurity firm Doctor Web reported the detection of malware disguised as legitimate software, such as office programs, game cheats, and online trading bots. This crypto-mining and stealing software has infected over 28,000 users, primarily in Russia, but also in Belarus, Uzbekistan, Kazakhstan, Ukraine, Kyrgyzstan, and Turkey. Doctor Web stated that hackers have only obtained approximately $6,000 worth of cryptocurrency. However, it remains unclear how much the malware creators have earned from cryptocurrency mining. The cybersecurity company noted that the sources of this malware include fraudulent GitHub pages and YouTube video descriptions with malicious links. Once a device is infected, the covertly deployed software hijacks computing resources to mine cryptocurrency. The malware, known as 'Clipper,' also monitors the cryptocurrency wallet addresses copied to the device's clipboard and replaces them with addresses controlled by the attackers, enabling them to steal small amounts of cryptocurrency.