The Giant of the tech Microsoft discovered a new remote access trojan (rat) that targets the crypto held in 20 cryptocurrency wallet extensions for the Google Chrome browser.
The Microsoft incident team responding Says In a March 17 blog post it first discovered Malware Stichirat in November and found that it could steal information such as credentials stored in the browser, Digital Wallet Information and data stored in the clipboard.
After the deployment, evil actors can use Siphon Crypto Wallet Data by siphon crypto wallet data by scanning for configuration information for 20 crypto wallet extensions, including Coinbase’s wallet, confident purse, metamask and OKX wallet.
Malware Stilachirat can target crypto held in 20 different purse extensions. Source: Microsoft
“The WWStartUPCTRL64.DLL Stilachirat module module containing rat capabilities revealed the use of various methods to steal information from the target system,” Microsoft said.
Among other capabilities, malware can pick up the credentials saved on Google Chrome Local State files and monitor clipboard activity for sensitive information such as Passwords and Crypto Keys.
It can also use detection prevention and anti-forensics features, such as the ability to clear event logs and check for signs that it runs in a sandbox to block review attempts, according to Microsoft.
So far, the giant tech said it could not determine who was behind the malware but hoped that the public to share the information would lower the number of people who could be snapped.
Related: New Massjacker Malware targets Piracy users, stealing crypto
“Based on Microsoft’s current visibility, Malware does not show extensive distribution at this time,” Microsoft said.
“However, due to its stealth capabilities and its rapid changes within the malware ecosystem, we share these findings as part of our ongoing efforts to monitor, study, and report the emerging threat.”
Microsoft suggests preventing the victim’s fall in malware; Users should have antivirus software, cloud-based anti-phishing and anti-malware components on their devices.
Losses in crypto scams, exploitation and hacking reaches Nearly $ 1.53 billion in Februarywith $ 1.4 billion bybit hack accounting for part of lion losses, according to blockchain security firm Certik.
Blockchain analytics firm chainalysis said in his 2025 Crypto crime report That crypto crime has entered a professional period managed by scams driven by AI, Stablecoin laundering, and excellent cyber syndicates, along with last year witnessing $ 51 billion in incorrect transactions.
Magazine: Funny ‘Chinese Mint’ Crypto Scam, Japan Dives into Stablecoins: Asia Express
