First clipper malware discovered on Google Play

guest · Feb 8, 2019

First clipper malware discovered on Google Play
Cryptocurrency stealers that replace a wallet address in the clipboard are no longer limited to Windows or shady Android app stores
February 8, 2019
https://www.welivesecurity.com/2019/02/08/first-clipper-malware-google-play/

This dangerous form of malware first made its rounds in 2017 on the Windows platform and was spotted in shady Android app stores in the summer of 2018. In February 2019, we discovered a malicious clipper on Google Play, the official Android app store.

Although relatively new, cryptocurrency stealers that rely on altering the clipboard’s content can be considered established malware
Copy&Steal
[...] Android/Clipper.C, impersonates a legitimate service called MetaMask. The malware’s primary purpose is to steal the victim’s credentials and private keys to gain control over the victim’s Ethereum funds. However, it can also replace a Bitcoin or Ethereum wallet address copied to the clipboard with one belonging to the attacker.
Click to expand...

This first appearance of clipper malware on Google Play serves as another imperative for Android users to stick with the best practices for mobile security.
Click to expand...

guest · Dec 7, 2019

Clipper malware used to steal cryptocurrency funds
December 5, 2019
https://coinrivet.com/clipper-malware-used-to-steal-cryptocurrency-funds/

The malware, called a ‘clipper’, replaces users’ crypto addresses with the hacker’s own address when copy and pasting.
Cybersecurity researcher Lukas Stefanko discovered the exploit earlier this year. It is most often deployed through fake or infected apps on the Google Play store.

Stefanko claims that the malicious downloads aren’t restricted to dodgy sites or app stores, and some are even being downloaded through highly trustworthy sites such as CNET.
The need for user-friendly addresses
Many cryptocurrency experts have called for user-friendly wallet addresses that are easier to remember or recognise at a glance but which don’t compromise on cryptographic security.
Stefanko wrote on Bitcointalk, the popular Bitcoin forum where the exploit was first revealed, that:

“Even if you check part of the pasted Bitcoin address, chances are the first few characters are the same, and you still won’t notice the address was changed.”
Click to expand...

Avoid falling prey to malware
The most simple way to avoid falling prey to such scams is to double-check every single digit of a pasted cryptocurrency address, no matter how tedious this may seem.
Click to expand...

Log in or Sign up

First clipper malware discovered on Google Play

guest Guest

guest Guest

Log in or Sign up

First clipper malware discovered on Google Play

guest Guest

guest Guest

Useful Searches