Close Menu
ApeWatcher News
  • Home
  • Advertise
  • Headlines
  • Crypto
    • News
    • Bitcoin
    • Ethereum
    • Altcoin
    • View All
  • DeFi
  • NFT
  • Metaverse
  • Guides
  • Rates
  • Videos
  • Listing Platform
  • BSC
  • ETH
  • Listing Platform
  • BSC
  • ETH
What's Hot

ADA News Today: Cardano to Directly Feature Blockchain and Assets on Brave Browser

May 13, 2025

Nirvana Labs Raises $6 Million to Build Next-Gen Web3 Infrastructure

May 13, 2025

Is XRP a Good Investment in 2025?

May 13, 2025
X (Twitter) Telegram
  • Listing Platform
  • Home
  • BSC
  • ETH
Advertise
X (Twitter) Telegram
ApeWatcher News
  • Headlines
  • Crypto
    1. News
    2. Bitcoin
    3. Ethereum
    4. Altcoin
    5. View All

    ADA News Today: Cardano to Directly Feature Blockchain and Assets on Brave Browser

    May 13, 2025

    Nirvana Labs Raises $6 Million to Build Next-Gen Web3 Infrastructure

    May 13, 2025

    Bitcoin illiquid supply hits 14M BTC as hodlers set bull market record

    May 13, 2025

    Tether Gold enters Thailand with listing on Maxbit exchange

    May 13, 2025

    Bitcoin illiquid supply hits 14M BTC as hodlers set bull market record

    May 13, 2025

    Arizona governor kills two crypto bills, cracks down on Bitcoin ATMs

    May 13, 2025

    Craig Wright sent enemies to legal ‘hell,’ says judge in restraining order

    May 13, 2025

    SEC hacker once Googled ‘if I am being investigated by the FBI’

    May 13, 2025

    Crypto Trader Says Bitcoin on Cusp of Price Discovery Phase, Sees Ethereum Attacking December Highs

    May 13, 2025

    Price predictions 5/12: SPX, DXY, BTC, ETH, XRP, BNB, SOL, DOGE, ADA, SUI

    May 12, 2025

    Analyst Predicts Multiple Weeks of Bullish Price Action for Altcoins, Says Trend Switch for Ethereum Is Clear

    May 12, 2025

    Bitcoin, altcoins poised to rally on US-China tariff agreement

    May 12, 2025

    Tether Gold enters Thailand with listing on Maxbit exchange

    May 13, 2025

    Trump-owned Truth Social denies it is launching a memecoin

    May 13, 2025

    Dogecoin traders predict 180% DOGE price rally if Bitcoin gains continue

    May 13, 2025

    Crypto ETFs Set Record With $62,900,000,000 Yearly Flows After Four Straight Green Weeks: CoinShares

    May 12, 2025

    ADA News Today: Cardano to Directly Feature Blockchain and Assets on Brave Browser

    May 13, 2025

    Nirvana Labs Raises $6 Million to Build Next-Gen Web3 Infrastructure

    May 13, 2025

    Is XRP a Good Investment in 2025?

    May 13, 2025

    Bitcoin illiquid supply hits 14M BTC as hodlers set bull market record

    May 13, 2025
  • DeFi
  • NFT
  • Metaverse
  • Guides
  • Videos

    Bitcoin to 120k, ETH Explosion & Next Top Altcoins To PUMP!

    May 12, 2025

    BREAKING: Bessent Announces US/China Trade Deal – Bitcoin SUPPLY SHOCK Incoming!

    May 11, 2025

    Solana’s Path to $1000 Starts Here — Don’t Miss This Update

    May 11, 2025

    BREAKING: Taiwan URGENTLY Plans Bitcoin Strategy in 2025

    May 10, 2025

    🚨XRP BLACKLISTED?! Trump TRICKED & FURIOUS

    May 10, 2025
ApeWatcher News
Home » Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles
Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles
News

Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles

Coin TelegraphBy Coin TelegraphApril 9, 20250 ViewsNo Comments
Share
Facebook Twitter LinkedIn Pinterest Email

Malicious actors are attempting to steal crypto with malware embedded in fake Microsoft Office extensions uploaded to the software hosting site SourceForge, according to cybersecurity firm Kaspersky.

One of the malicious listings, called “officepackage,” has real Microsoft Office add-ins but hides a malware called ClipBanker that replaces a copied crypto wallet address on a computer’s clipboard with the attacker’s address, Kaspersky’s Anti-Malware Research Team said in an April 8 report.

“Users of crypto wallets typically copy addresses instead of typing them. If the device is infected with ClipBanker, the victim’s money will end up somewhere entirely unexpected,” the team said.

The fake project’s page on SourceForge mimics a legitimate developer tool page, showing the office add-ins and download buttons and can also appear in search results.

Kaspersky said it found a crypto-stealing malware on the software hosting website SourceForge. Source: Kaspersky

Kaspersky said another feature of the malware’s infection chain involves sending infected device information such as IP addresses, country and usernames to the hackers through Telegram.

The malware can also scan the infected system for signs it’s already been installed previously or for antivirus software and delete itself.

Attackers could sell system access to others

Kaspersky says some of the files in the bogus download are small, which raises “red flags, as office applications are never that small, even when compressed.” 

Other files are padded out with junk to convince users they are looking at a genuine software installer.

The firm said attackers secure access to an infected system “through multiple methods, including unconventional ones.”

“While the attack primarily targets cryptocurrency by deploying a miner and ClipBanker, the attackers could sell system access to more dangerous actors.” 

The interface is in Russian, which Kaspersky speculates could mean it targets Russian-speaking users.

“Our telemetry indicates that 90% of potential victims are in Russia, where 4,604 users encountered the scheme between early January and late March,” the report stated.

To avoid falling victim, Kaspersky recommended only downloading software from trusted sources as pirated programs and alternative download options carry higher risks.

Related: Hackers are selling counterfeit phones with crypto-stealing malware

“Distributing malware disguised as pirated software is anything but new,” the company said. “As users seek ways to download applications outside official sources, attackers offer their own. They keep looking for new ways to make their websites look legit.”

Other firms have also been raising the alarm over new forms of malware targeting crypto users. 

Threat Fabric said in a March 28 report it found a new family of malware that can launch a fake overlay to trick Android users into providing their crypto seed phrases as it takes over the device.

Magazine: Bitcoin heading to $70K soon? Crypto baller funds SpaceX flight: Hodler’s Digest, March 30 – April 5

Read the full article here

Follow us on Google News to get the latest Updates

 
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

ADA News Today: Cardano to Directly Feature Blockchain and Assets on Brave Browser

May 13, 2025

Nirvana Labs Raises $6 Million to Build Next-Gen Web3 Infrastructure

May 13, 2025

Bitcoin illiquid supply hits 14M BTC as hodlers set bull market record

May 13, 2025

Tether Gold enters Thailand with listing on Maxbit exchange

May 13, 2025

Crypto Trader Says Bitcoin on Cusp of Price Discovery Phase, Sees Ethereum Attacking December Highs

May 13, 2025

BTC Price News: Bitcoin Crossing $2T in Market Cap Triggers Retail FOMO. What Next?

May 13, 2025
Add A Comment
Leave A Reply Cancel Reply

Top Articles

ADA News Today: Cardano to Directly Feature Blockchain and Assets on Brave Browser

May 13, 2025

Nirvana Labs Raises $6 Million to Build Next-Gen Web3 Infrastructure

May 13, 2025

Is XRP a Good Investment in 2025?

May 13, 2025
ApeWatcher News
X (Twitter) Telegram
  • Privacy Policy
  • Sources
  • Terms and Conditions
  • Contact
  • Advertise
© 2025 Ape Watcher News

Type above and press Enter to search. Press Esc to cancel.