New crypto-stealing malware discovered

A new crypto-malware named “PennyWise” spreading through the video platform YouTube has been reported. This cryptocurrency malware tricks users to download software that can steal data from 30 crypto wallets and browser extensions.

PennyWise targets over 30 Chrome-based browsers, over 5 Mozilla-based browsers, Opera and Microsoft Edge. The malware can take screenshots and steal sessions of chat applications like Discord and Telegram.

This malware targets both hot and cold crypto wallets such as Zcash, Armory, Bytecoin, Jaxx, Exodus, Ethereum, Electreum, Atomic Wallet, Guarda, and Coinomi as well.

Cyber intelligence company Cyble said that the threat actors are spreading PennyWise as a free Bitcoin mining software. They have posted over 80 YouTube videos which contain the links to download the malware. Individuals looking for Bitcoin mining software on YouTube may become the victims of this malware.

The malware has been designed not to steal from users in countries like Russia, Ukraine, Belarus and Kazakhstan. Users are advised to avoid downloading pirated software from unverified websites. Users should also enforce multi-factor authentication and always refrain from opening untrusted links and email authenticity.