Kaspersky Discoveres New Cryptocurrency Stealing Trojan Called CrryptoShuffler

[mohit3110MM]

Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.

Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.

[1715278207]

1715278207

[1715278207]

1715278207

[1715278207]

1715278207

[1715278207]

1715278207

[1715278207]

1715278207

[1715278207]

1715278207

[prlelbnwh]

This is not a good thing for virtual currencies.Malware is not the focus, but people and the media have focused on the virtual cryptocurrency as a tool for people to think of virtual currencies as criminals.

[VitKoyn]

Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.

Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.

Careless people who don't know how to secure their device will always be the victim of these malwares. Cryptocurrencies are decentralized and all are based on blockchain technology so there is no chance for them to have access and steal coins inside it, that is why hackers and malwares are attacking the platforms and wallets we are using. If your not confident that your device is not infected by any virus or malwares then always double check your address before making any transactions, I always do this even though I'm confident that my computer is malware free.

[fiulpro]

Well a very well Known fact about Viruses and malwares are ^ They are created by the companies owning an antivirus software.. Its their marketing strategy.. first create a plague and then let the others pay for being safe from it .. Its what I learned in my ethical hacking workshop and its literally the only thing that I remember 😂.

Well since cryptocurrency market is going big and increasing at a very fast rate thus its attracting all kinds of attention from everywhere this..thing was meant to be sooner or later..
I think we really only do need to care about our wallets.. an offline wallet is highly preferable over an online one also people who will invest in B2X needs to be extremely careful since.. the B2X will be more suspectable to such malwares and viruse's attacks..
All we need to do is to keep our wallets secure..private key in hand and..also ! First do a full research on the wallet that we are thinking of entrusting our bitcoins in .. rest is something that can't be harmed because there isn't any body controlling it.. who else the virus can target.?

[tidus1097]

Well a very well Known fact about Viruses and malwares are ^ They are created by the companies owning an antivirus software.. Its their marketing strategy.. first create a plague and then let the others pay for being safe from it .. Its what I learned in my ethical hacking workshop and its literally the only thing that I remember 😂.

Not always the case. Majority of crypto-related virus/malwares come from "black-hat" hackers. Some come in the form of ransomware, while some as clipboard manipulator. Although the first one is quite harmless since a simple hard-reset will bring back everything to normal while the latter one is scary as it will alter a copied bitcoin address and change it into their receiving addresses. An unaware user will definitely fall for it.

These kind of viruses will definitely not be a marketing strategy for ethical hackers working under Antivirus companies. Although I agree, sometimes they do release some false malware reports which aren't even real in the first place.   

[bob123]

Thats one kind of malware aiming to crypto currency owners. This is probably the easiest form of malware to implement.
I think there are more dangerous malwares in the wild. Starting from wallet.dat stealer (which also is pretty easy to implement)
up to a tool which reads out the memory for private keys or any usable dumps which tries to push TX instant when a private key is found anywhere.
The only way to be safe from that is to use a 1) Paper wallet or a 2) Hardware wallet. A hardware wallet provides enough security, so that
private keys can't be exported and with double checking address (when approving the transaction).

[eckmar]

Hardware wallets have solved this issue. They display the address on the screen so you can clearly see if there was tampering or not. With Bitcoin price of 7500$ (at the moment of writing this) I don't think that investing 100$ into hardware wallet in order to secure your coins is a bad idea.

[Wilfrer]

Perhaps this is a useful warning to the community. I still have not noticed any signs of crime on forums and also on transactions. The point here is that you should be wary of malware and unlucky links on unconfirmed topics in the forum.

[squatz1]

Hardware wallets have solved this issue. They display the address on the screen so you can clearly see if there was tampering or not. With Bitcoin price of 7500$ (at the moment of writing this) I don't think that investing 100$ into hardware wallet in order to secure your coins is a bad idea.

Well it is a bad idea as most people aren't going to be owning one bitcoin (at 7500) as it doesn't make sense for people to be owning that much (regular, everyday people of course)

But this is going to be a bit of a bad reputation for Bitcoin, though something like this is the only way for people to innovate when it comes to Bitcoin security as people aren't going to listen to security advisers unless people have money stolen.

[Jahreer]

Sorry, I misread: "Kaspersky Develops Cryptocurrency Stealing Trojan Called CrryptoShuffler"
  about reputation of Kaspersky..
Beware of using it)

[mmmmyah]

Do people still use Kaspersky after the current Congress investigation and ban on that company? Is it still trustworthy ..

[nl247]

This is not a good thing for virtual currencies.Malware is not the focus, but people and the media have focused on the virtual cryptocurrency as a tool for people to think of virtual currencies as criminals.

Viruses have always been in existence even before the invention of Bitcoin and it totally depends on every user's readiness to keep their wallets secured. For those who know they cannot stay secured enough with either online or desktop wallets, there are cold storages that can be easy to use and at least guarantee you some high level of security.

It is crazy though, that these guys are really trying their best to get their hands on so many assets, knowing that so many people getting into the crypto atmosphere now are not security conscious and have no much idea about usable security which is why everyone should try their best to find how to enhance the security of their wallets as much as possible.

[tyuner4]

Hardware wallets have solved this issue. They display the address on the screen so you can clearly see if there was tampering or not. With Bitcoin price of 7500$ (at the moment of writing this) I don't think that investing 100$ into hardware wallet in order to secure your coins is a bad idea.

I second this. $100 is definitely a well worth investment for your crypto currencies that are worth alot more.

Virus attack is one of the major problems we are facing apart now. New viruses come out and antivirus softwares might not be in time to detect and solve them. Therefore hardware wallets are helpful in this sense.

[BaeNaNa]

Malware is probably the easiest thing that can steal the inside of people 's wallet simply because a lot of people don't protect their pc from malware attack. Other thing that can be done to prevent this is to buy hardware wallet, maybe some people consider it expensive but it will boost your security and prevent something like this happening.

[BlockMedx]

This is just yet another reason why security is so important.  Security. Security. Security.

You alone are responsible for your private keys, and security.  Make sure you cross all your i's and dot your t's

[mamesso]

whether this is some kind of ad, or hoax. hopefully not true.
this is very horrible and will be the biggest disaster for crypto users.
such as ransomware, they commit malicious attacks around the world.

[joebrook]

Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.

Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.

This calls for more stringent security measures so that we can safely protect our wallets. To those who easily allow anyone to use their computers this should be stopped less they download these Trojans mistakenly unto their computers.

[xdrpx]

This was something bound to happen with computer / desktop wallets that are connected to the internet. There was a similar malware sometime few months ago where a reddit user posted that their copied address was replaced with the malware's bitcoin address when trying to make a payment. I think the user lost about 13 BTC at that time, which is a huge amount considering today's rate.

I wonder what all OS environments does CryptoShuffler effect and if on non-windows environment what steps have been made to isolate it. Apart from that, it would also be good to know the source from where the malware was downloaded such that others are warned about it.

[GreenBits]

Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.

Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.

Now that Ive had the malware described to me (read this as a bitcoin headline but didnt click), Im a bit confused. How is this any different that any other trojan that compromises a wallet and steals the keys? maybe this was a simplistic explanation, but seriously there have been programs that hijack wallet clients pretty much since bitcoin started to be worth something. I guess maybe this one can compromise multiple clients with just the one piece of code?

this is why we used to warn folks about installing altcoin wallets on the same rigs as bitcoin wallets. the bitcoind codebase was pretty much the same as most of the alts, it wasnt a giant intuitive leap to figure if you would download an obscure altcoin wallet, then you most likely know about bitcoin, and also have a bitcoin wallet on the same rig

[eckmar]

Hardware wallets have solved this issue. They display the address on the screen so you can clearly see if there was tampering or not. With Bitcoin price of 7500$ (at the moment of writing this) I don't think that investing 100$ into hardware wallet in order to secure your coins is a bad idea.

Well it is a bad idea as most people aren't going to be owning one bitcoin (at 7500) as it doesn't make sense for people to be owning that much (regular, everyday people of course)

But this is going to be a bit of a bad reputation for Bitcoin, though something like this is the only way for people to innovate when it comes to Bitcoin security as people aren't going to listen to security advisers unless people have money stolen.

Point being is even if you owned 300$ in BTC over last few month you would more than double what you own. Does it not make sense to spend some of the profits to make your current and future funds secure ?

[vapourminer]

Now that Ive had the malware described to me (read this as a bitcoin headline but didnt click), Im a bit confused. How is this any different that any other trojan that compromises a wallet and steals the keys? maybe this was a simplistic explanation, but seriously there have been programs that hijack wallet clients pretty much since bitcoin started to be worth something. I guess maybe this one can compromise multiple clients with just the one piece of code?

this one monitors the clipboard for a crypto addys and replaces it with it own, similar one. its been around for a long time, well over a year im sure, at least the btc one. im sure newer ones monitor for more.

simple solution: get a hardware wallet for crypto that they support (trezor supports btc/eth/ltc/bcc, a couple others for example). also helps not to install alt wallets willy nilly. not to mentions pirated software in general. *nix/mac helps but they not immune to virii, contrary to what some think.

[jseverson]

I've read about this in a thread a few weeks ago. Some user said he had the very same problem. It's very alarming if you're blindly using copy paste, but I'm willing to bet that most users at least try to cross check their addresses. This is money we're dealing with after all.

Still, they have already stolen a few coins, and it's just alarming how these hackers are crafting viruses specifically for hacking Bitcoins. This is a relatively simple one, but if these are starting to get popular, how long will it take for more elaborate viruses and trojan to spread right? Everyone should really learn how to protect themselves.

[bitjoin]

Hardware wallets have solved this issue. They display the address on the screen so you can clearly see if there was tampering or not. With Bitcoin price of 7500$ (at the moment of writing this) I don't think that investing 100$ into hardware wallet in order to secure your coins is a bad idea.

I think its a good idea but i cant fully 100% trust a hardware wallet, any reason why i should? Maybe having a % in your hardware wallet is the way to go.

[yndye]

I've read about this in a thread a few weeks ago. Some user said he had the very same problem. It's very alarming if you're blindly using copy paste, but I'm willing to bet that most users at least try to cross check their addresses. This is money we're dealing with after all.

Still, they have already stolen a few coins, and it's just alarming how these hackers are crafting viruses specifically for hacking Bitcoins. This is a relatively simple one, but if these are starting to get popular, how long will it take for more elaborate viruses and trojan to spread right? Everyone should really learn how to protect themselves.

We should always be careful in all we do online especially regarding the addresses because if one is not careful then the funds can be easily stolen. It would be advisable to use a separate gadget strictly for cryptocurrency and if possible disconnect the internet if one is not using it. The safer way would be to store the funds in a hardware wallet. Due to the recent spike in price, cryptocurrency has attracted more attention to people and those who are looking for an easy way to get hold of bitcoin would likely do something illegal like this and others would follow suit so we should always secure our funds.

[silent17]

Researchers at the Kaspersky Lab have recently discovered a new malware named CryptoShuffler Trojan that is being used by cybercriminals to steal cryptocurrencies from a user’s wallet. What this malware does is that it replaces the user’s wallet address by its own in their devices.

Kaspersky – The Russia-based cybersecurity company has claimed that the cybercriminals are targeting popular cryptocurrencies like Ethereum, Bitcoin, ZCash, Dash, Monero with a target of stealing 23 BTC worth nearly $100,000.

Does this malware also change the online wallet that we have? currently i'm only using a web base wallet because i don't want to install wallet in my cellphone or PC to avoid being stolen, because i usually don't have a permanent PC nor Phone. because of that I choose to have a web base wallet.

[ivrynx]

This news is very disturbing, what we should do is to be more careful at sites that w go to, a d especially the programs that we download, they should all.come to trusted websites or sources. It is a good that we this community,.everyone is becoming aware in cases like this, hopefully kaspersky team will announce what is the source of the trojan and hopefully find a way to block and deleted its files. Hopefully there would be an update from kaspersky.