{Warning}: Oscorp new crypto key logger malware

[Baofeng]

Dubbed as "Oscorp" by Italy's CERT-AGID, this is a keylogger malware which specialised in stealing crypto to those who are using Blockchain.com wallet.



And this is some of the malware's capability:

• Enable keylogger functionality.
• Automatically obtain the permissions and capabilities required by the malware.
• Uninstall app.
• Make calls.
• Send SMS.
• Stealing cryptocurrency.
• Stealing the PIN for Google's 2FA

And so far they have stolen $584.00 worth of bitcoin.



https://cert-agid.gov.it/news/oscorp-il-solito-malware-per-android/

[Porfirii]

Thank you for the warning Baofeng, this seems to be serious.

Do we know how it works? I mean, how do you get infected by this malware? does it only work using the wallet via browser, or App too?

PC only, or MacOS too? Android or iOS?

[UserU]

Thank you for the warning Baofeng, this seems to be serious.

Do we know how it works? I mean, how do you get infected by this malware? does it only work using the wallet via browser, or App too?

PC only, or MacOS too? Android or iOS?

Seems to be Android-exclusive for now, according to this article.

Researchers at the Italian CERT warns of new Android malware dubbed Oscorp that abuses accessibility services for malicious purposes.

Source: https://securityaffairs.co/wordpress/113983/malware/oscorp-android-malware.html

[pakhitheboss]

Dubbed as "Oscorp" by Italy's CERT-AGID, this is a keylogger malware which specialised in stealing crypto to those who are using Blockchain.com wallet.



And this is some of the malware's capability:

• Enable keylogger functionality.
• Automatically obtain the permissions and capabilities required by the malware.
• Uninstall app.
• Make calls.
• Send SMS.
• Stealing cryptocurrency.
• Stealing the PIN for Google's 2FA

And so far they have stolen $584.00 worth of bitcoin.



https://cert-agid.gov.it/news/oscorp-il-solito-malware-per-android/

Thanks for the heads-up @Baofeng
This is serious as there are more Android users than iOS. Inam suprised as it seems to only attack android operating system. I think it will affect chromium browser too. As it is easy to for malware to target browser.