A new type of crypto-malware identified on Alphabet Inc-owned Google’s YouTube has been found to infect users’ devices and steal from 30 different types of cryptocurrency wallets and browsers.
What Happened
According to a recent report from cyber intelligence firm Cyble Research Labs, the newly developed cryptocurrency stealer named “PennyWise” uses multithreading to steal user data.
The threat actors (TA) reportedly spread the PennyWise stealer as a link to download free Bitcoinmining software.
“When a user visits the link, the TA instructs them to download the malware hosted on the file hosting service. The malware file is zipped and password protected. To appear legitimate, the TA has shared a VirusTotal link of a clean file that is not related to the file available for download,” explained the Cyble researchers….