Clipboard Hijacker Targeting Bitcoin & Ethereum Users Infects Over 300,0000 PCs

guest · Jun 15, 2018

Clipboard Hijacker Targeting Bitcoin & Ethereum Users Infects Over 300,0000 PCs
June 15, 2018
https://www.bleepingcomputer.com/ne...and-ethereum-users-infects-over-300-0000-pcs/

A malware campaign spreading a clipboard hijacker has infected over 300,000 computers, according to Chinese security firm Qihoo 360 Total Security.

The campaign has been raging for the past week and has spread a malware which Qihoo researchers have named ClipboardWalletHijacker.
Malware replaces BTC & ETH addresses in the clipboard
The malware's purpose is to intercept content recorded in the Windows clipboard, look for strings resembling Bitcoin and Ethereum addresses, and replace them with ones owned by the malware's authors.

Since Qihoo 360 is a vendor with the vast majority of its presence on the Chinese market, it is believed that most of the 300,000 infected PCs are located in China and neighboring countries.
Click to expand...

guest · Jun 30, 2018

Clipboard Hijacker Malware Monitors 2.3 Million Bitcoin Addresses
June 30, 2018
https://www.bleepingcomputer.com/ne...alware-monitors-23-million-bitcoin-addresses/

While we have covered cryptocurrency clipboard hijackers in the past and they are not new, most of the previous samples monitored for 400-600 thousand cryptocurrency addresses. This week BleepingComputer noticed a sample of this type of malware that monitors for a over 2.3 million cryptocurrency addresses!
To illustrate how this malware will replace cryptocurrency addresses found within the Windows clipboard, we have created the video below. [...]
How the infection loads
This infection was spotted as part of the All-Radio 4.27 Portable malware package that was distributed this week.
Protecting yourself from clipboard hijackers
As malware like this runs in the background with no indication that it is even running, is it not easy to spot that you are infected. Therefore it is important to always have a updated antivirus solution installed to protect you from these types of threats.

It is also very important that all cryptocurrency users to double-check any addresses that they are sending cryptocoins to before they actually send them. This way you can spot whether an address has been replaced with a different one than is intended.
Click to expand...

Sampei Nihira · Jun 30, 2018

Scriptsafe has a specific setting that prevents this attack.

Rasheed187 · Jul 7, 2018

You can also protect against clipboard hijackers with SpyShelter. AFAIK, malware will always need to install a so called "clipboard hook" in order to monitor and manipulate the clipboard.

wat0114 · Jul 13, 2018

Even easier is to exercise common sense and not install crapware.

Log in or Sign up

Clipboard Hijacker Targeting Bitcoin & Ethereum Users Infects Over 300,0000 PCs

guest Guest

guest Guest

Sampei Nihira Registered Member

Rasheed187 Registered Member

wat0114 Registered Member

Log in or Sign up

Clipboard Hijacker Targeting Bitcoin & Ethereum Users Infects Over 300,0000 PCs

guest Guest

guest Guest

Sampei Nihira Registered Member

Rasheed187 Registered Member

wat0114 Registered Member

Useful Searches