Summary:
New malware targets Windows users to steal cryptocurrencies and sensitive data.
Styx Stealer exploits a Windows Defender vulnerability for stealthy attacks.
Crypto-clipper functionality allows silent theft during transactions.
Keep your Windows OS updated to protect against such threats.
Be cautious of malicious links and attachments in emails.
New Crypto Theft Warning for Windows Users
An alarming report from Check Point Research reveals a powerful new attack aimed at Windows users. This malicious malware is capable of stealing sensitive information, including browser cookies, security credentials, and instant messages. The latest version of the malware has been improved to effectively empty crypto wallets.
The malware is an adaptation of the Phemedrone Stealer, previously in the news, which exploits a vulnerability in Microsoft Windows Defender to execute scripts without any security prompts.
Security Risks and Exploitation
Microsoft patched the vulnerability (CVE-2023-36025) last year, and users must ensure their OS is updated. With the end of support for Windows 10 approaching in October 2025, many users may find themselves vulnerable.
Styx Stealer, linked to the Agent Tesla threat actors, is now available for rent at $75 per month. This malware can lead to ransomware attacks and poses a significant threat to users globally.
Targeted Browsers and New Capabilities
Styx Stealer targets all Chromium-based browsers (including Chrome, Edge, and Opera) and Gecko-based alternatives (like Firefox and Tor). Notably, it introduces a crypto-clipper functionality that autonomously checks clipboard content, allowing it to steal cryptocurrency during transactions by replacing wallet addresses.
How to Protect Yourself
Check Point advises users to keep their Windows OS updated and be cautious of malicious links and attachments in emails. This malware thrives on exploiting user errors, making vigilance essential to protect crypto wallets and sensitive information.
Crypto stealing malware for sale
In the shadowy world of cybercrime, even the most cunning hackers can make mistakes that expose their operations. Stay informed and safe!
Comments