Avast announces new VenomSoftX malware aimed at stealing cryptocurrencies

Article Reading Time:
1 min.

Avast, a company operating in the field ofinformation security, warned about the spread of a new malicious extension, VenomSoftX, for the Google Chrome browser, which steals cryptocurrencies.

According to Avast specialists, on its ownThe virus has been known since 2020, but since the beginning of 2022 a sharp increase in the number of cases of infection has been recorded - more than 93,000. VenomSoftX and its copy ViperSoftX are distributed through pirated distributions of hacked games and software.

The malicious extension disguises itself ascalled Google Sheets 2.1, there were also cases of installation called Update Manager. Viruses track user visits to websites of popular cryptocurrency exchanges and replace API requests to steal cryptocurrencies. 

VenomSoftX also monitors the contents of the bufferexchange in search of addresses and passwords from cryptocurrency wallets. Moreover, the user is shown his wallet address, but in the background the viruses are trying to transfer all possible funds to the addresses of the attackers.

In the list of sites whose visits are trackedThe virus turned out to be Binance, Coinbase, Gate.io, Kucoin and Blockchain.com. Judging by the transactions, the hackers managed to steal assets worth at least $130,000. Avast experts urged users to check for the Google Sheets extension in their browser.

In October, it was reported that users of the Phantom wallet for the Solana NFT network were under attack from hackers.