Fake Tor Browser steals Bitcoin from Dark Web users

guest · Oct 18, 2019

Fake Tor Browser steals Bitcoin from Dark Web users
October 18, 2019
https://www.zdnet.com/article/malicious-tor-browser-steals-bitcoin-from-dark-web-users/

A covert campaign to deprive Dark Web users of their cryptocurrency has been exposed by researchers.
The cyberattackers behind the operation have been distributing a malicious version of the Tor Browser, required to access the underbelly of the Internet, for years -- and have included a cryptocurrency stealer as a bonus.

The Trojanized Tor installer is also promoted on two typosquatted websites, tor-browser.org and torproect.org. In Russian, the domains display messages informing visitors their Tor version is outdated and attempt to redirect them to another website containing a Windows-based installer. At present, there is no sign of a malicious macOS, Linux, or mobile version.

In addition, the HTTPS Everywhere add-on, included by default, has been modified to add a script that loads on every webpage and sends the user's browsing activity directly to a command-and-control (C2) server controlled by attackers.
Click to expand...

Purchases made in these marketplaces are usually done so using cryptocurrency such as Bitcoin (BTC) in order to mask the transaction and user's identity.

If a user visits these domains and tries to make a purchase by adding funds to their wallet, the script activates and attempts to change the wallet address, thereby ensuring funds are sent to an attacker-controlled wallet instead.

"In theory, the attackers can serve payloads that are tailor-made to particular websites. However, during our research, the JavaScript payload was always the same for all pages we visited," the researchers say.
Click to expand...

ESET: Fleecing the onion: Darknet shoppers swindled out of bitcoins via trojanized Tor Browser

Log in or Sign up

Fake Tor Browser steals Bitcoin from Dark Web users

guest Guest

Log in or Sign up

Fake Tor Browser steals Bitcoin from Dark Web users

guest Guest

Useful Searches