A type of malware (malware) has now been identified as spreading through videos on the YouTube site that will steal data from 30 wallets and extensions (extensions) of crypto browsers.
The malware, dubbed ‘PennyWise’ was detected last May by cyber intelligence firm Cyble, will trick users into downloading software specially designed to access user data.
Clearly Cyble, the malware is spread through a video teaching (tutorial) Bitcoin mining (BTC) for free which then instructs the viewer to download a special software and turn off the antivirus function.
The software will steal the victim's data in the form of Chromium and Mozilla browsers, including cryptocurrency extension data and login activity, and can also take screenshots on applications such as Discord and Telegram.
Adding to the worries, the malware also targets crypto cold wallets such as Armory, Bytecoin, Jaxx, Electrum, Atomic Wallet, Guarda and Coinomi as well as wallets that support Zcash and Ethereum.
Adds Cyble, before the channel was removed from YouTube there were nearly 80 videos containing the malware as of June 30th.
Cyble also found something interesting about the malware in that it does not track victims who are in Russia, Ukraine, Belarus or Kazakhstan and uses the Moscow time zone.
Meanwhile, according to other sources, there is still malware similar to PennyWise on several other YouTube channels that promise free non-fungible tokens (NFT) or free Spotify premium as a reward.
It is said that each such channel has just been created in less than 24 hours.
Going by the record, this isn’t the first time crypto malware has existed where last February a Mars Stealer malware did similar activity to Chromium browser extensions like Metamask, Binance Chain Wallet or Coinbase Wallet.
