Türkçe
Español
Cybersecurity researchers have warned that criminals are employing new methods to compromise crypto wallets. The technique involves attacks using inconspicuous packages aimed at seizing crypto users’ funds during their transactions. This scenario highlights the urgent need for new measures to safeguard crypto assets.
Crypto Asset Security Risks
Cybersecurity firm ReversingLabs reported the installation of malicious packages in popular open-source software repositories like npm. The harmful package lures users by claiming to convert PDF files to Microsoft Office documents. However, in the background, malicious code sneaks into local libraries, overwriting wallet files and disrupting their functionalities.
Post-attack, the secure files in affected crypto wallets are altered by malware. This issue, particularly identified in Atomic and Exodus wallets, results in the redirection of crypto assets to wallets controlled by attackers during transaction processes. Users unknowingly end up transferring their cryptocurrencies to the perpetrators.
Details of the Attack
The ReversingLabs research team emphasized that merely removing the package is insufficient. Company officials stated that for the complete eradication of malware and traces in wallet software, applications must be uninstalled and reinstalled on the computer.
ReversingLabs: “Web3 wallet software will continue to redirect to malicious wallets until malware is completely removed.”
The complexity of cyber attack methods has prompted users to reevaluate their system security. The overlooked details in open-source software provide advantages to attackers, making it increasingly important for users to seek professional help in suspicious situations. Developers are also expected to undertake updates and improvements against similar threats.
Research related to this issue underscores the necessary actions to enhance the security of digital assets. The employed attack method not only calls for innovative measures but also initiates steps to raise user awareness regarding crypto security.
