New Malware Targets Cryptocurrency Wallets

According to Odaily, researchers from Microsoft Threat Intelligence have identified a new variant of the XCSSET malware, initially discovered in 2020, which poses a threat to cryptocurrency wallets. This malware allows malicious actors to capture screenshots, monitor user activities, and steal data from Telegram. The updated version can also target data within the Apple Notes application and employs obfuscation techniques to evade detection. XCSSET theoretically has the capability to manipulate content viewed by end-users in browsers, potentially altering or replacing Bitcoin and other cryptocurrency addresses, which could result in funds being sent to unintended destinations. Researchers advise users to consistently check and verify any Xcode projects downloaded or cloned from repositories, as malware often spreads through infected projects. Additionally, they recommend installing applications only from trusted sources, such as official app stores of software platforms.