How Crypto scammers creating traps to break the system security

[Cryptocrit]

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKlwsS-z3D_5CJIMlRFZiRN4IUI4FFhbR2zPptWcJWTVmGRDQKe_AMdSXKZJ7kj5w4SpETqDLOHiyNROMxRQu7kA1qtAsdVHSx2f5oE17TQTuzf1BMO0e8Z8wwVVfqZldV_SIU4m11ytE5b0RB_9nzANX920YDfUsdNVwanPXLZr7SpG3GZavl-bs3jDde/w640-h638/Screenshot_18.jpg

A company called Trend Micro found a new kind of harmful software called Phemedrone Stealer. This software takes advantage of a problem in Microsoft Windows that has already been fixed. It specifically targets internet browsers and steals information from digital wallets used for cryptocurrencies. The report from the Texas-based company says that Phemedrone Stealer doesn't just take crypto-related info; it also gets data from messaging apps like Telegram, Steam, and Discord.

People who know about online security have seen that Phemedrone Stealer does more than just steal information like usual harmful software does. According to Crypto News, besides taking sensitive info, this software also takes pictures of what's on the screen and gathers a lot of details about the computer system, like what hardware it has, where it's located, and what operating system it uses. This way of doing things shows how advanced and complicated modern online threats are because the people behind them keep changing their methods.


Read more...
https://www.cryptocrit.xyz/2024/01/how-crypto-scammers-creating-traps-to.html

[1714857039]

1714857039

[1714857039]

1714857039

[1714857039]

1714857039

[1714857039]

1714857039

[1714857039]

1714857039

[Tipstar]

Windows is the worst operating system to use for crypto. It's easy to get keyloggers and clipboard hackers on windows. Almost all of pirated windows OS or windows software like MS office and Games are filled with attempts to steal your crypto. Android might be much better to use and easier and most sites are now mobile first but there too are several apps that copies the clipboard. But if you don't install apps that you are not sure, it won't automatically install things just by browsing.
The best way to handle crypto is to have a different device preferably linux distro that just have the official preferably firefox with a good adblocker preferably ublock origin and using it only for crypto related tasks. Still copying pasting your private keys should be avoided.

[btc78]

This is extremely alarming the fact that scammers or hackers can now get into legitimate applications and softwares is very bothering we do not know where or what to use anymore in order to avoid these kinds of incidents it is hugely important that we now become extra careful as if we were not careful enough back then because we never know how a hack could be presenting itself

[DaveF]

Link to the original trend micro article:

https://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html

Not that big a deal if you are using any kind of AV software.

And it's exploiting a vulnerability that has been patched for over 60 days at this point.
If you have not updated your system in 2 months, and are not using AV software, well that's on you.

-Dave

[batang_bitcoin]

Trend Micro is a known security company and I have known for quite a while so, IMO they are reliable with these findings.But in case you have missed it, there is already a thread posted earlier than yours about this topic in the Beginners and Help.

Phemedrone Stealer targeting crypto wallets, do not click URL shorteners

[johnsaributua]

Terrible, I myself use trial-based windows, throughout the history of this annoying softwhare and I may have just found out from you, whether crypto is actually contrary to computing, someone's dream that with simple softwhare but can safely surf, since my activities are quite frequent for airdrop tasks (crypto) especially altcoins.

As much as possible I separate and do not store my assets on a computer with vulnerabilities that have occurred like this, I only store social media data and bitcointalk forums, it's terrible if personal information can be copied and really invisible. Like I have to replace original windows at an official price because it concerns the continuity of the pc that I use every day. At least I have separated it. I think some people might be caught off guard, what are your solutions?

[Kelward]

This is extremely alarming the fact that scammers or hackers can now get into legitimate applications and softwares is very bothering we do not know where or what to use anymore in order to avoid these kinds of incidents it is hugely important that we now become extra careful as if we were not careful enough back then because we never know how a hack could be presenting itself

News of scams and hacks are a common news now in the crypto space, no week goes by that we don't hear of a major scam and hacks, this trend is very worrisome especially now that they're breaking into legitimate corporate entities that are crypto holdings, exchanges and wallets, also invading into our personal systems, we just have to be more security conscious, be more informed and guide ourselves against their evil schemes. The internet is no longer safe because of this fraudsters, so everybody must take note and guard against scams.

[ItsCrafty]

If I say about the hacker what he suggests uses have the different method uses like programs that you download hacker   data recovers or they create website give you  same  to same original that makes you apply it hacks your account and does something like that. They set the bot in your account.
when you also send fund on the account, it shifts directly to another account  so it's very risky to you as well. For this you need to be there all the time to be safe and check everything and then connect to your wallet.

[JeromeTash]

More reason to use a Linux based OS especially if you are involved with crypto. Most of the malware creators target largely used operating systems like Windows and android because that's where most of the money and data is. Linux is mostly ignored because of a relatively small user base. With that being said, an air gapped device would be the most ideal option.

Using an Anti virus gives a false sense of security, though. One has to be very smart and a void downloading and executing random files in a device they use for wallets and transactions.

[icalical]

Read more...
https://www.cryptocrit.xyz/2024/01/how-crypto-scammers-creating-traps-to.html

Man, your site has a lot of annoying ads, so I decided to do google search of my own about this Phemedrone Stealer. This malware is using Windows Defender flaw so anyone who are not using Windows OS is supposed to be safe. And also this is an opensource and even has it's Github page, https://github.com/nullixx/Phemedrone-Stealer. This will make easier for Windows Defender developer to quickly fix the flaw or to update their security.

[passwordnow]

Time to shift with the other OS that usually aren't ignored by these hackers and stealers due to the poor number of user or they just can't really penetrate to their systems. I am not expert on this matter but we've got ways to improve our security and there is no doubt that Windows is the most desired OS of these hackers because of having a lot of users worldwide.

Using linux distro OSs' will make someone safe from all of these attacks and mac can also be a good contender on this but it is not for free unlike the Linux's. So if someone is wanting to change their ways of usage for their computers and considering it, test them first or use virtualbox to have that idea on its environment. Because if you're a Windows user and you'll transfer into the usage of Linux asap, you'll have hard time to adapt but that's just the beginning of it and soon you'll get to be familiarized with it because you'll be forced to.

[Makus]

Scammers and hackers are getting innovative everyday, the list we can do to keep our assets safe is by learning and studying to find new hacks or scam that could be used by any of them. When you keep yourself updated, you stand a chance to knowing their move before they use it on you. I have encountered several scam and my escape route has been the knowledge I have acquired about scam. Op that for the information, this is why an air gapped device  is the best to use for the safety of our assets.

[Belarge]

Scammers and hackers are getting innovative everyday, the list we can do to keep our assets safe is by learning and studying to find new hacks or scam that could be used by any of them. When you keep yourself updated, you stand a chance to knowing their move before they use it on you. I have encountered several scam and my escape route has been the knowledge I have acquired about scam. Op that for the information, this is why an air gapped device  is the best to use for the safety of our assets.

Firstly, we should protect our assets with the require funds accumulated, not given deaf ears to scamming project. Scams can not be eradicated from the market permanently but it can be reduced to its lowest ratio and this can happen only when the users are swiftly enlighten regarding the basis of the market. The market is broad and not everyone have an idea of the complex scams going on. Scammers and hackers have drawn the lineup and strategies posed for their operation, they targets the top users that have gigantic portfolio and not some random users, newbies precisely.

[Ben Barubal]

This is extremely alarming the fact that scammers or hackers can now get into legitimate applications and softwares is very bothering we do not know where or what to use anymore in order to avoid these kinds of incidents it is hugely important that we now become extra careful as if we were not careful enough back then because we never know how a hack could be presenting itself

News of scams and hacks are a common news now in the crypto space, no week goes by that we don't hear of a major scam and hacks, this trend is very worrisome especially now that they're breaking into legitimate corporate entities that are crypto holdings, exchanges and wallets, also invading into our personal systems, we just have to be more security conscious, be more informed and guide ourselves against their evil schemes. The internet is no longer safe because of this fraudsters, so everybody must take note and guard against scams.

   Nowadays scammers use Bitcoin or cryptpcurrency in their scams in the crypto community. Why is it a big problem for those who participate that they don't know that they have fallen into the trap of scammers. Usually what they do is because they are good at hyping their prospects that they will prey on.

   So intelligence and sensitivity are needed so that we don't fall prey to exploitative people who always use cryptpcurrency just to prey here in this field of crypto space.

[Mate2237]

This is a very serious matter in the internet. So what are the modalities for this casino now because if someone just mistakenly install that software in his computer from the ads display when browsing then you information in the computer would be stolen by those guys. The more the technology is getting to the highest advance level the more the scammers also advancing.

Their target now is cryptocurrencies and specifically bitcoin. In these days if you see the kind of advertisement on social media platforms, you wouldn't believe. These scammers make things reality. But they can't scam someone like me.

[Makus]

This is a very serious matter in the internet. So what are the modalities for this casino now because if someone just mistakenly install that software in his computer from the ads display when browsing then you information in the computer would be stolen by those guys. The more the technology is getting to the highest advance level the more the scammers also advancing.

Their target now is cryptocurrencies and specifically bitcoin. In these days if you see the kind of advertisement on social media platforms, you wouldn't believe. These scammers make things reality. But they can't scam someone like me.

That is one major reason why I don't believe most of the things I see in social Media. Nowadays the scam rate of ads have increased to an unimaginable height and you don't even know if they are now telling the truth or it's an scam. Indeed I have known you to be a reputable member here in this forum and I don't think you can easily fall for cheap scams like that. But we still have to be fully cautious of scam especially when dealing with things related to cryptocurrency.  There are several way they could present a scam and it will look absolutely legit, our only way out to is to gather information about scams and hacks.

[Questat]

Having good knowledge and technology development are great but somehow, it was also a threat to our security and privacy. Online wallets become vulnerable to hacking, every single mistake we make can lead to emptying our wallet address. That is how development and advanced technology come the wrong way. I'd rather get back to those times when people were not knowledgeable about programs as they couldn't think about hacking and stealing people but now, it was a weapon used and seemed easy for them to fulfill what they wanted.

[glendall]

It is very worrying that with a situation like this, hackers are becoming more innovative and the asset owner is less updated in the security offered or lacks new insight into crypto so we can conclude that where there is an opportunity there is a crime that will occur,
Here, we as asset owners are required to always be updated on all matters relating to asset security,

[Churchillvv]

Well even before you published this information I have read about it from the link provided by DaveF.
it's a bit troubling how hackers gets into the activities of most crypto users through vulnerable security systems that we use. even our windows defenders and malware dictators can't help it any more.

We all have to just stay safe and be conscious of whatever we do on the internet. it paramount to know and do your own research and not to click on any link that we see because most times they impersonate our reliable sources to get into our devices.

[jrrsparkles]

No system is completely secured when it's connected to the internet, that has been proved multiple times by ethical hackers and we all know even the US top security agencies' websites have been hacked so the scammers always find a way to break in and it is our responsibility to keep the assets secure which means in cold storage.