Cryptocurrency-stealing Trojan infected 28,000 users, stole just $6,000

BlockBeats news, October 10, cybersecurity company Doctor Web recently reported that it has detected malware disguised as legitimate software, such as office programs, game cheats, and online trading robots. The crypto-jacking and stealing software has infected more than 28,000 users, mainly in Russia, but also in Belarus, Uzbekistan, Kazakhstan, Ukraine, Kyrgyzstan and Turkey.

According to Doctor Web, the hackers only obtained about $6,000 worth of cryptocurrency. However, it is not clear how much money the creators of the malware made from cryptocurrency mining. The cybersecurity company said the sources of the malware include fraudulent GitHub pages and YouTube video descriptions with malicious links.

Once the device is infected, the secretly deployed software hijacks computing resources to mine cryptocurrency. "Clipper" also monitors the crypto wallet addresses that users copy to their device clipboards, and then the malware replaces them with addresses controlled by the attackers - this is how they steal small amounts of cryptocurrency.