MassJacker malware uses 778,000 wallets to steal cryptocurrency

Summary: The newly uncovered clipboard hijacking operation known as ‘MassJacker’ exploits over 778,531 cryptocurrency wallet addresses to steal digital assets from compromised systems. Discovered by CyberArk, the operation is suspected to be operated by a specific threat group, relying on malware that replaces copied wallet addresses with those controlled by the attackers. The campaign has resulted in significant illegal transactions, including one Solana wallet with over 0,000 accumulated.

Affected: Cryptocurrency users and digital asset systems

Keypoints :

• MassJacker uses clipboard hijacking malware to replace cryptocurrency wallet addresses.
• About 423 wallets linked to the campaign contained ,300, with transactions suggesting greater historical sums.
• It is spread via a site hosting pirated software and employs several sophisticated obfuscation techniques for evasion.
• CyberArk emphasizes the need for heightened scrutiny of cryptojacking operations due to their potential links to identifiable threat actors.