ESET antivirus discovers new malware that hijacks clipboard to replace crypto wallet addresses

posted 5 months ago
Slovakia-based antivirus software maker ESET unveiled a new type of banking trojan that can empty crypto wallets. From the Casbaneiro (Metamorfo) family, these viruses are popular in Latin America where cryptocurrency adoption is growing relatively significantly. Casbaneiro simulates mouse and keyboard actions and takes screenshots through the backdoor to steal sensitive data.

The most important part is that the attacker is able to hijack the victim’s clipboard data and replace it with his own. For example, when you want to send Bitcoin to somebody’s wallet, you coins will be sent to an address you never intended to paste. ESET experts recommend that users follow basic security rules when entering personal data to make online payments, and use reliable software to protect their devices
Tags: bitcoin, news