Hodlers beware! New malware targets MetaMask and 40 other crypto wallets

The targeted wallets include MetaMask and Nifty Wallet as well as Coinbase Wallet and Coinbase Wallet. Security expert states that malware can assault extensions on Chromium-based web browsers, other than Opera.

According to security scientist 3xp0rt, the malware was named Mars Stealer by its developers. The malware targets more than 40 browser-based cryptocurrency wallets and popular two-factor authentication (2FA/2FA) extensions.

Browser-based crypto wallets that save Bitcoin (BTC), Ether( ETH) and other currencies were not developed for security. New malware has actually made it a lot more difficult to safeguard online wallets from hackers by targeting internet browser extensions like MetaMask and Binance Chain Wallet.

Chainalysis: Millions of dollars are being stolen by less sophisticated malware

Mars Stealer can spread out via various channels, including file-hosting websites, torrent customers, and other suspicious downloaders. The malware very first checks the language of the system after infecting it. The malware will leave the system if it matches the language IDs of Kazakhstan, Uzbekistan or Azerbaijan, Belarus, or Russia.

The malware targets sensitive details, such as personal keys and address information for crypto wallets. Once the theft is finished, it leaves the system and deletes any presence.

The malware targets more than 40 browser-based cryptocurrency wallets and popular two-factor authentication (2FA/2FA) extensions. The targeted wallets include MetaMask and Nifty Wallet as well as Coinbase Wallet and Coinbase Wallet. Browser-based wallet users or internet browser extensions such as Authy that permit 2FA to work are recommended to avoid clicking on suspicious links and downloading.

Dark web online forums are selling Mars Stealer at $140 to hackers. This implies that destructive actors have a low barrier to entry the trojan. Browser-based wallet users or browser extensions such as Authy that allow 2FA to work are advised to avoid clicking suspicious links and downloading.
Read More