Kaspersky security researchers said they have identified a new malware strain called OkoBot that is designed to steal cryptocurrency wallet seed phrases and credentials through roughly 20 separate modules. According to the researchers, the operators use the ClickFix social engineering technique to trick victims into running malicious commands, then distribute the malware through GitHub repositories disguised as legitimate tools such as SQL Server Management Studio. The report also outlines several named components inside the malware family. One module, SeedHunter, injects into hardware wallets including Trezor and Ledger and presents a fake interface during seed phrase recovery. Another, MC Keylogger, captures keyboard input and clipboard activity. A third module, OkoSpyware, tracks wallet passwords and records window video. The findings point to a multi-module malware operation focused on collecting highly sensitive wallet access data.
Odaily reported that Kaspersky security researchers have detected a new malware strain, OkoBot, that steals cryptocurrency wallet seed phrases and credentials through roughly 20 modules.
According to the researchers, the attackers rely on the ClickFix social engineering technique to trick users into executing malicious commands. The malware is then spread through GitHub repositories disguised as legitimate tools, including SQL Server Management Studio.
Modules target seed phrases, passwords and user activity
Kaspersky said OkoBot includes a module called SeedHunter, which injects into hardware wallets such as Trezor and Ledger and shows a fake interface when users attempt to recover seed phrases.
Other components include MC Keylogger, which records keyboard and clipboard activity, and OkoSpyware, which tracks wallet passwords and records window video.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
