You are reading about: "Mac malware “CookieMiner” targets crypto traders, aims to bypass 2FA on exchanges and web wallets"
AltcoinTrading.NET / Crypto Security
Palo Alto Networks’ Unit 42 reported a new malware that targets Mac users.
The malware was developed from code used for older campaigns and so it also goes for the obvious steady revenue generation through illicit mining.
Cryptojacking has solidified into good practice in the business of commercial malware, and so this particular one also taps into your laptop’s power to mining Monero. It also adds Koto, a lesser-known Japanese cryptocoin, that supports GPU mining.
What it does
Crypto mining is not dangerous, the real danger of this malware (dubbed CookieMiner) lies in its other areas of focus:
- CookieMiner will steal browser cookies, particularly looking for data related to mainstream cryptocurrency exchanges and crypto web wallets.
- It also steals saved passwords from Chrome browser.
- If you have iTunes backups for your iPhone, it will also get your text messages.
This combination of credentials will probably allow the CookieMiner authors to get around multi-factor authentication on crypto exchanges and web wallets.
The malware comes with a script that gives the attacker remote control over your Mac and potentially can remain hidden for a good amount of time, patiently waiting until all necessary credentials are collected to exploit your exchange and wallet accounts.
The attacker could also leverage their remote access to later install a keylogger, while profiting from the crypto mining in the meantime.
How to protect your crypto
The report doesn’t mention in what kind of campaign this malware spreads.
There have been several major phishing mail blasts lately, some even very legitimate looking job offers with malicious documents in attachments.
The advice here is to be vigilant about what you click on in your e-mails. If you’re getting an attachment from someone you don’t know, try and request a Google Docs invite instead.
Similar level of attention should go to downloading new wallets and apps, perhaps for your airdrops.
It is always safer to have a triered device system for crypto, including a burner device that you use as a dumpster for every activity that is potentially dangerous.
Data is beautiful
Brand development in forex and crypto: Most expensive domain names [Infographic]
Crypto infographics - Most expensive domain names in forex and crypto. Targeted brand development in forex and crypto with domain names.
Top 8 Women in Blockchain Technology [Infographic]
When it comes to women in crypto, the pre-2016 OG heads will probably come up with names like Alena Vranova and Blythe Masters. Alena Vranova is the former CEO of Satoshi Labs, the company that...
Blockchain Consortium in Trade Finance: 6 Notable Networks [Infographic]
The success of trade finance blockchain implementations depends on how widely they are adopted. That's why we have seen businesses form consortia based on similar interests.
Comparing Forex Market with Cryptocurrency Markets [Infographic]
One of the few metrics that cryptocurrency markets have in common with the forex markets in 2018 is the high percentage of total trades being located on few most popular markets.
Blockchain Technology 101: Blockchains, Blocks and the Role of Price [Infographic]
Blockchain technology 101: What is blockchain, what types of blockchains exist and what role does the cryptocurrency price play.
Real-world companies that accept crypto payments [Infographic]
Infographic - Graphic map of businesses that let customers pay in bitcoin.
Infographic: Blockchain Hacks & Crypto Trading Platform heists 2018 vs 2017
Blockchain infographic comparing the biggest crypto heists of 2018 and 2017. In 2017 the focus lied more on ICOs, smart contracts and wallet.
15 crypto kings that are making history with their engagement in the field of cryptocurrencies
Coining The Bucks With Cryptocurrencies Have you ever wondered how much masters of the cryptocurrencies are worth? Like the guy who founded Ethereum, or the one who started Ripple, for example. The answer, in short,...
The Good And The Bad Of ICOs
Infographic: The good and bad of ICOs - Which token sales raised the most money in 2018?
Industry News Releases
Following the Dog bounty hunt marking the end of the Year of Dog for Etheremon,...Read >>
- Crypto Marble dApp Game: Monopoly on Blockchain
- The dApp gaming platform VX Network launched the official VX Wallet in Apple App Store and Google Play
- Etheremon's first Chinese New Year Campaign: Chance to recall two rare mons
- Fuel Games and Cryptokitties bring you "The Cat in the Pack" until the end of January 2019
- Action RPG dApp game Hero of Cryptoworld is starting its character presale
- Libereum, the crypto investment company, acquired Spanish football club Elche CF
Also by Chris A.
Released on February 04, 2019 05:52:35 AM by Chris A. Read >>
Released on January 23, 2019 12:38:24 PM by Chris A. Read >>