Video game mods are spreading new ‘Stealka’ crypto infostealer: Kaspersky
Kaspersky discovered 'Stealka,' a new infostealer disguised as game mods and cheats, targeting crypto wallets and browser data on Windows.Summary
Cybersecurity firm Kaspersky has identified a new infostealer named "Stealka" that targets Microsoft Windows users by masquerading as video game cracks, cheats, and mods. Discovered in November, attackers use this malware to hijack accounts, steal cryptocurrency, and install crypto miners. The malicious software is distributed via legitimate platforms like GitHub, SourceForge, and Google Sites, sometimes using professional-looking fake websites.
Stealka's primary danger lies in its extensive capabilities targeting data from browsers built on Chromium and Gecko engines, affecting over 100 browsers including Chrome and Firefox. It steals autofill data (credentials, addresses, payment details) and targets the settings/databases of 115 extensions, including those for crypto wallets (like MetaMask and Trust Wallet), password managers, and 2FA services. Messaging apps, email clients, and VPNs are also at risk.
Kaspersky advises users to stay protected by using reliable antivirus software, password managers instead of browser storage, and strictly avoiding pirated software and unofficial game mods.
(Source：Cointelegraph)