Warning: A new malware has been detected that allows cryptocurrency theft.
Kaspersky analysts have discovered a dangerous virus named Stealka, which masquerades as mods for popular games (Roblox, GTA V) and pirated software. It spreads through GitHub, SourceForge, and fake websites.
The virus allows hackers to gain access to private keys, seed phrases, autofill data, passwords from extensions and password managers. It also compromises accounts on Discord, Telegram, gaming platforms, and VPN services.
➤ What is at risk: over 100 browsers (Chrome, Firefox, Opera, Edge, Brave) and 80+ cryptocurrency wallets, including Binance, Coinbase, MetaMask, Trust Wallet, Phantom, Exodus.
➤ Geography: the main victims are in Russia, but attacks have also been recorded in Turkey, Brazil, Germany, and India.
➤ How to protect yourself: do not download pirated programs and unofficial mods, use reliable antivirus software, do not store passwords and seed phrases in the browser, enable 2FA on all accounts, and install extensions only from verified sources.
➤ Good news: Kaspersky blocks all detected cases of infection, and no confirmed large-scale cryptocurrency thefts have been reported yet.