New cryptomalware currently targets cryptocurrency wallets, such as Coinbase, Binance Chain, and MetaMask. Right now, these digital wallet services are not focusing on their systems' security features.  

However, the new malware called Mars Stealer makes the online safety their provide more complicated and questionable. 

The researcher who found the security threat, 3xp0rt, explained that this malicious campaign is similar to the recent Oski Trojan. 

However, he added that Mars Stealer is more severe than the information-stealing trojan virus that was active in 2019. 

New Crypto Malware Targets Coinbase, MetaMask 

According to Coin Telegraph's latest report, the new cryptomalware targets more than 40 cryptocurrency wallets that work as browser extensions (browser-based). 

Also Read: SolarMarker Malware Still Active on Compromised Systems? Experts Explain Why It's Alarming

On the other hand, it also attacks some popular two-factor authentication and a grab function, allowing it to acquire sensitive crypto wallet private keys from its victims. 

"Mars Stealer written in ASM/C with using WinApi, weight is 95 kb. Uses special techniques to hide WinApi calls, encrypts strings, collects information in the memory, supports secured SSL-connection with C&C, doesn't use CRT, STD," said 3xp0rt via his official blog post

Aside from Coinbase, Binance Chain, and MetaMask, the security expert also provided other tools targeted by Mars Stealer.  

Mars Stealer's Other Targets 

Targeting crypto wallet services is alarming since the new malware can lead to massive digital currency theft, especially since more people are now investing in Bitcoin, Ethereum, and other rising cryptocurrencies. 

However, this new cryptomalware also focuses on some popular browsers. These include Microsoft Edge, Internet Explorer, Brave, Epic Privacy Browser, Opera Stable, and other browsing tools. 

On the other hand, it can collect the following information: 

  • Processor model
  • Computer name
  • Machine ID
  • GUID
  • Installed software and their versions
  • User name
  • Domain computer name

If you want to see more details about the new Mars Stealer malware, you can click this link

In other news, HUB Security finally achieved FIPS 140-2 level certification. Meanwhile, the FBI's latest warning urges audiences and athletes to use temporary phones for the upcoming Beijing Winter Olympics. 

For more news updates about Mars Stealer and other security threats, always keep your tabs open here at TechTimes.  

Related Article: BazarBackdoor Trojan Involved in a New Phishing Campaign | CSV Text Files Used to Spread Malware

This article is owned by TechTimes

Written by: Griffin Davis

ⓒ 2024 TECHTIMES.com All rights reserved. Do not reproduce without permission.
Join the Discussion