An “active and ongoing” threat campaign that steals bitcoin wallets.??
BITCOIN USERS IN TROUBLE 😳
What is the Masad Clipper and Stealer?
Security researchers from Juniper Threat Labs have reported how spyware delivered by a Trojan and using the encrypted Telegram messaging platform for data exfiltration, targets cryptocurrency wallets.
The off-the-shelf malware, identified as “Masad Clipper and Stealer,” is currently being distributed in black market forums online. The malware starts off free, but the prices ramp up to $85 (£69) for the versions with the most functionality. Juniper researchers discovered a Telegram group, with more than 300 members, where potential buyers can learn more and, it is thought, also get tech support. The Telegram messaging service, with more than 200 million users worldwide, is also being deployed as a command and control (C2) channel for the malware to provide anonymity to the operators. I say operators for a good reason: Masad is sold as an off-the-shelf package and therefore being used by multiple criminal actors. The Juniper researchers have found 338 different Telegram C2 bot IDs to date, which ties in nicely with the Telegram Masad support group membership. Find Out More About This Threat Here