Microsoft Issues Warning About New Malware Targeting Cryptocurrency Wallets
Technology powerhouse Microsoft has recently released a concerning report highlighting a new form of malware that is specifically designed to target 20 of the most popular cryptocurrency wallets available as Google Chrome extensions. This alarming development was disclosed by Microsoft’s Incident Response team, who identified a remote access trojan (RAT) known as StilachiRAT.
In a detailed blog post, the researchers elaborated on StilachiRAT, which employs sophisticated techniques to evade detection, maintain persistence within the infected environment, and exfiltrate sensitive information from users. The malware was first detected in November 2024 and is capable of stealing crucial wallet information, as well as any stored credentials such as usernames and passwords from users’ Google Chrome browsers.
Among the 20 targeted cryptocurrency wallets are some of the most widely utilized options, including MetaMask, Coinbase Wallet, Phantom, OKX Wallet, and BNB Chain Wallet. Although the distribution of this malware has not yet reached a widespread level, Microsoft has noted that the identity of the entity behind this threat remains unknown.
To assist potential victims, the company has outlined several mitigation strategies, emphasizing the importance of installing reputable antivirus software as a fundamental protective measure. In their report, Microsoft stated, “Due to its stealth capabilities and the rapid changes within the malware ecosystem, we are sharing these findings as part of our ongoing efforts to monitor, analyze, and report on the evolving threat landscape.”
