Did you heard about the Stealka malware

[_act_]

It has been since published five days ago by Kawasaki but k sreached this forum and I did not see anything related to the malware. The malware masquerades as pirated software and game mods. It targets data stored inside browsers, locally installed applications, and crypto wallets.

Windows users are affected. People in Russia are most affected but countries like India, Germany, Turkey and Brazil are also targeted by the hackers. Stealka can hijack accounts, steal cryptocurrency, and install a crypto miner on their victims’ devices.

Stealka is a stealer malware, it can collects information stored on the victim’s device and sends it to the attackers’ server. Stealka is primarily distributed via popular platforms like GitHub, SourceForge, Softpedia, sites.google.com, and others, disguised as cracks for popular software, or cheats and mods for games.

How devices can be infected,
For the malware to be activated, the user must run the file manually.

It primary target is to steal data on browsers based on Chromium and Gecko engines. Stealka also targets the settings and databases of 115 browser extensions for crypto wallets, password managers and 2FA services. It can access the data on extensions like Binance, Coinbase, Crypto.com, SafePal, Trust Wallet, MetaMask, Ton, Phantom, Exodus, Authy, Google Authenticator, 1Password, Bitwarden, LastPass, KeePassXC, NordPass.

It can also access data on crypto wallet, message apps, password managers, note-taking apps, email clients, VPN clients, gaming services and clients.

https://www.kaspersky.com/blog/windows-stealer-stealka/55058/

It is very good to learn how to avoid malware.

[Emjay24]

Where it gets very crazy it's that it can also affect 2FA tools which directly means that if your device is infected, your financial and crypto wallets can be compromised even though you turned on 2FA. It's really dangerous and the only valid prevention on hot devices is working with strong antivirus which has its virus definitions updated to detect the Stealka virus. Social engineering gets smarter everyday.

Only hardware wallets and cold storage can escape the wrath of this kind of malware, more reason we should go for them.

[_act_]

Where it gets very crazy it's that it can also affect 2FA tools which directly means that if your device is infected, your financial and crypto wallets can be compromised even though you turned on 2FA. It's really dangerous and the only valid prevention on hot devices is working with strong antivirus which has its virus definitions updated to detect the Stealka virus. Social engineering gets smarter everyday.

It is not advisable to have both the apps like wallet or exchange on the same device that you have your authenticator app. I have different devices for both wallets, exchanges which is separate from the device that I have the 2FA.

Only hardware wallets and cold storage can escape the wrath of this kind of malware, more reason we should go for them.

Yes, the best is to use cold wallet. But multisig wallet can also help to a high degree.

[lovesmayfamilis]

Moreover, all gamers who enjoy various cheats and free software to enhance their games should separate their computer space into gaming and financial ones. Downloading pirated apps while simultaneously using your computer for financial matters will inevitably lead to financial losses. It's always a good idea to avoid saving confidential information in browsers, avoid installing numerous add-ons that steal user data, and use an antivirus.

[Amphenomenon]

Moreover, all gamers who enjoy various cheats and free software to enhance their games should separate their computer space into gaming and financial ones. Downloading pirated apps while simultaneously using your computer for financial matters will inevitably lead to financial losses.

In this current time, anyone who still stick to this is just giving their coins as a charitable bounty for attackers. There have been discussions on the risks involving this and more is still very much helpful but anyone who rather take this nonchalantly may someday be the next victim.

It's always a good idea to avoid saving confidential information in browsers, avoid installing numerous add-ons that steal user data, and use an antivirus.

Random add-ons especially from unverified source is more likely malicious and this goes beyond browsers and one of the popular target by attackers are IDE like Virtual studio code, I remember there been lots of malicious extensions found on there.

[BIT-BENDER]

Yes you are right it is very good yo learn how to avoid malware and also know about malware. But this stealka is quite dangerous and if you aren't aware of it you may probably fall victim of it.
For me make sure you are using offline wallet the risk on your device being online is just too much and many applications and browsers don't protect you enough from malwares.

[AVE5]

It has been since published five days ago by Kawasaki but k sreached this forum and I did not see anything related to the malware. The malware masquerades as pirated software and game mods. It targets data stored inside browsers, locally installed applications, and crypto wallets.

I've not come about this particular malware for discussion here too and thanks for sharing.
The vulnerabilities of this nature of threats are usually those user's who uses browsers that's the privacy-focus source and also downloading apps from unofficial or unverified trusted sites.
So your security apps including your crypto wallet security could also be really be a target.
Really it takes one to keep security and privacy off from third parties but also demands the ability to consider the security weaknesses of your device contents.

[Charles-Tim]

For me make sure you are using offline wallet the risk on your device being online is just too much and many applications and browsers don't protect you enough from malwares.

The roots malware get to devices is simple, but most people may not be able to avoid the malware. No download of unnecessary apps, disable the automatic update of installed apps, disable app store from downloading any apps, disable all apps from downloading any files, avoid to click on unauthorized links on social media and social networks like Whatsapp and others, do all things to disable your device of downloading anything.

But you are right that if you want to keep large amount of coins, make use of cold wallet, but there are ways you can still go about on online wallets to safely keep your low amount of money which you may want to have access to frequently.

[aysha9853]

It’s basically another reminder that cracked software is still one of the biggest attack vectors people think antivirus will save them, but once you manually run the file, the damage is already done using a separate device for wallets or at least a hardware wallet feels more necessary every year.

[Moreno233]

Where it gets very crazy it's that it can also affect 2FA tools which directly means that if your device is infected, your financial and crypto wallets can be compromised even though you turned on 2FA. It's really dangerous and the only valid prevention on hot devices is working with strong antivirus which has its virus definitions updated to detect the Stealka virus. Social engineering gets smarter everyday.

It is not advisable to have both the apps like wallet or exchange on the same device that you have your authenticator app. I have different devices for both wallets, exchanges which is separate from the device that I have the 2FA.

This is sk scary because it poses real threat to both inexperienced and experienced users. Any malware that can affect even 2FA is a big threat because 2FA is one of the top security people use for both exchange apps and even other platforms. Even social media accounts advise the use of 2FA, so anything that makes it useless is a big problem. I think it's high time one considered buying hardware wallet.

[Cookdata]

Unverifiable software are dangerous, I don't have anything on my PC than Bitcoin core, electrum, sparrow, chrome for surfing the web, and discord. I used it to have access to discord servers and that's it.
I used to have metamask extension but that wallet is now a crap, I don't know if the developers are on break or they are not serious due to lack of funding, the wallet is getting worse, don't respond quickly, I uninstall and got back my sanity.

It’s basically another reminder that cracked software is still one of the biggest attack vectors people think antivirus will save them, but once you manually run the file, the damage is already done using a separate device for wallets or at least a hardware wallet feels more necessary every year.

Antivirus can be active on your computer and malware will be stealing everything on your laptop without action from Antivirus. Some crack version of software has been tempered, some code are been recoded to bye-pass some features on your computer, I'm even not sure some understand anything that was compromised on the software not to even talk about non tech person; anything that is cheap can be harmful as far as software is concerned.

[promise444c5]

So your security apps including your crypto wallet security could also be really be a target.

Basically, everything is a target when your device is compromised, even if there are written targets (aka blog claims)..it doesn't mean it does exactly that, there could be more to be known..
An attacker can get hold of malware, decide to make a few modifications and additions that could be way more than what you might usually think it’s capable of.

In short, once you get your device compromised, just know that nothing on that device is safe from it(including what you might have been engaging during the compromised stage )..

[lovesmayfamilis]

The roots malware get to devices is simple, but most people may not be able to avoid the malware. No download of unnecessary apps, disable the automatic update of installed apps, disable app store from downloading any apps, disable all apps from downloading any files, avoid to click on unauthorized links on social media and social networks like Whatsapp and others, do all things to disable your device of downloading anything.

That's right, but this particular Trojan specifically attacks Windows users. So, fortunately, phone owners aren't currently at risk from this particular Trojan.

Yes you are right it is very good yo learn how to avoid malware and also know about malware. But this stealka is quite dangerous and if you aren't aware of it you may probably fall victim of it.

You don't need to know about this Trojan specifically to remember about internet security. The article clearly explains where this Trojan appears on internet users' computers. Freebie lovers, fans of free and cracked software, and avid gamers should consider whether their computer, along with their downloaded game add-ons and cheats, is harboring a miner that additionally scans the entire computer for seed phrases and anything else of interest to hackers.

[Outhue]

People who love free things will never escape from this malware, it is impossible, because many people still run free windows on their PC, they then proceed to look for way to activate the windows for free, and when it comes for software and games they don't want to pay money either.

As you can see, in a world where many people are still struggling to feed who would want to buy windows OS that costs $50 to $150 and still go on and start spending money on premium softwares and games? The day I stoped installing free software and games on my pc was the day I escaped insane amount of frustration, free things aren't always free after all. If I don't have money for a software that I want to use I will add it to my chart and let it sleep in there for a while until I am ready to purchase, say no to free pc games and softwares.

[suzanne5223]

It’s basically another reminder that cracked software is still one of the biggest attack vectors people think antivirus will save them, but once you manually run the file, the damage is already done using a separate device for wallets or at least a hardware wallet feels more necessary every year.

I agree with what you said. However, the issue of using pirated software being a cyber trap is not something new, and a lot of alarm was raised about it years ago. However, the sad thing is that some individuals and companies, especially those in the tech industry, use it to save money.
The other reason for using it despite the consequences of using it is what I don't understand.

[PostQuantumBTC]

It’s basically another reminder that cracked software is still one of the biggest attack vectors people think antivirus will save them, but once you manually run the file, the damage is already done using a separate device for wallets or at least a hardware wallet feels more necessary every year.

I agree with what you said. However, the issue of using pirated software being a cyber trap is not something new, and a lot of alarm was raised about it years ago. However, the sad thing is that some individuals and companies, especially those in the tech industry, use it to save money.
The other reason for using it despite the consequences of using it is what I don't understand.

Many people just go to Google to search for downloads and download software but some people also like pirated copies but they do not know its disadvantages. They would have been attacked before knowing that what they are doing is against good security of their devices.

[Jegileman]

Antivirus can be active on your computer and malware will be stealing everything on your laptop without action from Antivirus. Some crack version of software has been tempered, some code are been recoded to bye-pass some features on your computer, I'm even not sure some understand anything that was compromised on the software not to even talk about non tech person; anything that is cheap can be harmful as far as software is concerned.

Most cases of malware and hacks into computers to steal users data are coming mostly from installation of cheap software. You may be running away from spending money to get the best but while going for a less expensive one, you risk losing your whole finance you wanted to protect. It is good to get acquainted more with latest trends of malware attacks in order for one to be more careful and get to be updated and protect their data’s the more.

Sometimes I think that we can never get to bypass these guys but I get to realise than being informed of latest developments on it will keep you aware and more prepared of a potential hack from them since antivirus can still be ineffective and bypassed by this softwares.

[Cookdata]

Antivirus can be active on your computer and malware will be stealing everything on your laptop without action from Antivirus. Some crack version of software has been tempered, some code are been recoded to bye-pass some features on your computer, I'm even not sure some understand anything that was compromised on the software not to even talk about non tech person; anything that is cheap can be harmful as far as software is concerned.

Most cases of malware and hacks into computers to steal users data are coming mostly from installation of cheap software. You may be running away from spending money to get the best but while going for a less expensive one, you risk losing your whole finance you wanted to protect. It is good to get acquainted more with latest trends of malware attacks in order for one to be more careful and get to be updated and protect their data’s the more.

Sometimes I think that we can never get to bypass these guys but I get to realise than being informed of latest developments on it will keep you aware and more prepared of a potential hack from them since antivirus can still be ineffective and bypassed by this softwares.

Software doesn't have to be expensive before it can be consider safe. We have a lot of open source software wallet that are free and are very safe to use, Electrum Sparrow, Wasabi, and many others are free wallet developed by different people and they make zero money from this software. We have other free software like Winrar, they ask you for money to use the app but if you don't have it, you can use it for free and it's completely safe without any issues.

Where the problem lies is when end users want to use softwares that are not free by all means. Crack version of softwares are modified and are not even opens source for you to know what they did behind. You are trusting the person and the software to work on your computer without any issues and payment, if they encode a malware on the software, you will never know even with anti virus or system defenders because your system treat the malware as combine execution with the software.

[Aanuoluwatofunmi]

Things just keep ringing in my mind that we may not have enough of these attempt to scam others from related routes, because as some were being discovered, more new other routes are coming in, this guys out there aren't tired of devising their means to ensure that they launched their hack upon their targets and get hold of it, we have to keep on with information updates like this in this format to help keep us abreast of what they may do so we could act fast and ahead.

[EluguHcman]

Where it gets very crazy it's that it can also affect 2FA tools which directly means that if your device is infected, your financial and crypto wallets can be compromised even though you turned on 2FA. It's really dangerous and the only valid prevention on hot devices is working with strong antivirus which has its virus definitions updated to detect the Stealka virus. Social engineering gets smarter everyday.

Only hardware wallets and cold storage can escape the wrath of this kind of malware, more reason we should go for them.

2FA does not fight this kind of malwares because once the virus has gained access to your device, it would not really need further BB informations or your device permission to execute its job.

Hardware wallets may be safe from this threat since it is not connected to the internet but note that it is also risky to have a safe hardware device because not all devices are actually produced from the official industry. Some are just shilling.
So the best is to always but your and download your Apps down the official sites.