The crypto industry has recently faced various security issues, including a new malware named ModStealer targeting cryptocurrency users.
How ModStealer Works
ModStealer is designed to steal information regarding crypto wallets and user credentials. The malware is distributed through malicious job postings and employs heavily obfuscated JavaScript files, evading traditional antivirus detection.
Malware Infrastructure
According to Mosyle, the malware registers as a background agent on macOS, enabling it to remain undetected for extended periods. Its server is located in Finland, but reports suggest that traffic routes through Germany to obscure the operators' whereabouts.
Increase in Crypto Attacks
There has been a rise in attacks on cryptocurrency projects in recent months. Blockchain security firm PeckShield reports that hackers stole over $142 million in 17 attacks in the crypto industry just last month.
The presence of ModStealer highlights the need for continuous monitoring and the implementation of additional security measures to stay safe amid increasing threats.
