A new virus is intercepting data from hundreds of crypto wallets — Gen Digital

According to experts, the infection is carried out using ClickFix technology. Malicious actors intercept the clipboard and deceive users into executing a malicious command that launches the virus.

Torg Grabber also extracts data from other applications, including messaging apps (such as Discord and Telegram), gaming platforms, VPN clients, and email services.

Analysts note that the operators of the malicious program use a secure connection through Cloudflare infrastructure and have adapted the virus to bypass security mechanisms in browsers like Google Chrome, Brave, Microsoft Edge, Vivaldi, and Opera. The program is aimed at stealing passwords, private keys, seed phrases, and session data.

Experts recommend storing significant amounts of cryptocurrency outside hot wallets and limiting the use of desktop solutions for large transactions.

Previously, Kaspersky Lab specialists reported on the malicious program Stealka, which steals crypto wallet passwords and bank card data on Windows devices.