Crypto wallets outside five CIS countries are under the threat of a new trojan

The new Trojan virus Mars Stealer attacks browser-based crypto wallets. The malicious program works selectively, sparing computers and gadgets with the system language of one of the five CIS countries.

Digital security researcher 3xp0rt published an article on his blog in which he claims that Mars Stealer is an updated version of the Oski Trojan, released back in 2019 and designed to steal information.

Getting into a computer or other device, the virus, the article says, first scans the language in which the system is running. If it matches the identifiers of the languages ​​of Azerbaijan, Belarus, Kazakhstan, Russia or Uzbekistan, then the program leaves the system without performing any malicious actions. For the rest of the world, the author claims, the Trojan is dangerous.

According to 3xp0rt, the virus targets open-source Chromium-based browsers: Google Chrome, Microsoft Edge, Brave, Vivaldi, and dozens of others.

Security has never been a strong point of digital asset storage, the author of the study states, but the new virus directly targets MetaMask, Coinbase Wallet, Binance Chain Wallet and about 40 other crypto wallets.

The Trojan is distributed through file hosting and torrents. It sells for $140 on darknet forums, which means it’s fairly easy for attackers to gain access to the Mars Stealer.

Recall that in mid-January, Opera, using its own program code, introduced a browser for Web 3.0 with a built-in cryptocurrency wallet called the Crypto Browser Project.

Source: Bits

You may also like