Clipsa – Multipurpose password stealer

guest · Aug 6, 2019

This cryptocurrency stealing malware was blocked more than 360,000 times over the past year
Hackers amassed over $36,000 in stolen funds
August 6, 2019
https://thenextweb.com/hardfork/2019/08/06/cryptocurrency-malware-blocked-360000-times/

According to the latest figures from cybersecurity firm Avast, a cryptocurrency stealing malware has been blocked more than 360,000 times by its software.
The malware, named Clipsa, is described by Avast as a “multipurpose password stealer.” It exploits numerous attack vectors to steal or illicitly mine cryptocurrency.

Security researchers from Avast believe the malware is being distributed as part of a malicious codec installers for media players.
Between August 2018 and July 2019 Avast says it blocked Clipsa from infecting computer systems more than 360,000 times, protecting more than 253,000 users in the process.
Click to expand...

Avast: Clipsa – Multipurpose password stealer

Once on an infected device, Clipsa can perform multiple actions, such as searching for cryptowallet addresses present in victims’ clipboards to then replace the addresses victims want to send money to with wallet addresses owned by the bad actors behind Clipsa.

Furthermore, Clipsa is capable of searching for and stealing wallet.datfiles, and installing a cryptocurrency miner.
Additionally, Clipsa uses infected PCs to crawl the internet for vulnerable WordPress sites. Once it finds a vulnerable site, it attempts to brute-force its way into the site, sending the valid login credentials to Clipsa’s C&C servers.
Click to expand...

Log in or Sign up

Clipsa – Multipurpose password stealer

guest Guest

Log in or Sign up

Clipsa – Multipurpose password stealer

guest Guest

Useful Searches