Crypto malware PennyWise spreads through YouTube

In a June 30 blog post, cyber intelligence firm Cyble stated that it has been watching the crypto malware known as “PennyWise,” named after the monster in Stephen King’s horror novel “It,” and initially discovered in May. Cyber added that their investigation indicates that the stealer is an emerging threat.

Data obtained from the victim’s Computer include Chromium and Mozilla browser information, Bitcoin extension data and login information. It can also grab screenshots and take over chat sessions from apps like Discord and Telegram.

The crypto malware PennyWise also targets cold crypto-wallets such as Armory, Bytecoin, Jaxx, Exodus, Electrum, Atomic Wallet, Guarda, and Coinomi, as well as wallets supporting Zcash and Ethereum by searching in the directory for wallet files and sending a copy of the files to attackers.

The cybersecurity firm added that the PennyWise infultrates via YouTube mining education videos that offer viewers to download free Bitcoin mining software. The fraudsters create videos in which they advise viewers to follow the link in the description and download the free BTC mining software while also pushing them to disable their antivirus software, enabling the malware to operate successfully.

According to Cyble, the attacker had 80 videos on their YouTube account as of June 30. However, the channel has since ceased to exist. Similar connections to the crypto malware PennyWise are still on some YouTube channels, with videos offering free NFT mining, cracks on paid software, free Spotify premium, and game hacks and modifications. Many of these accounts came to light in the last 24 hours.

Who are behind these cyber-attacks?

Chainanalysis recently revealed that “low-skilled hackers” are deploying malware to steal assets from cryptocurrency holders, with crypto-hacking accounting for 73% of the total value acquired by malware-related addresses between 2017 and 2021.

For the latest Crypto Coin News, visit Latest Moni.