Microsoft discovers XCSSET malware variant that can target crypto wallets

Odaily Planet Daily News: Researchers at Microsoft Threat Intelligence, a subsidiary of Microsoft, have discovered a new type of malware that can target crypto wallets. XCSSET was first discovered in 2020, allowing malicious actors to take screenshots, record user behavior, and steal Telegram data. Updated versions can also locate data in Apple Notes applications and use obfuscation techniques to make malware more difficult to detect. XCSSET also theoretically has the ability to manipulate what end users see on their browsers. This could include modifying or replacing Bitcoin and other cryptocurrency addresses, meaning funds are not sent to their desired destinations. The researchers added that users must always check and verify any Xcode projects downloaded or cloned from repositories, as malware is often spread through infected projects. They should also only install applications from trusted sources, such as the official app store of the software platform. (Decrypt)