Skip to content

Crypto users warned as ads push malware-laden crypto apps

2025-07-31 05:00:47

Main Idea

A malware campaign named 'JSCEAL' has targeted crypto users by impersonating popular trading apps, exposing an estimated 10 million people globally to fake crypto apps with malware.

Key Points

1. The 'JSCEAL' malware campaign has been active since at least March 2024, impersonating apps like Binance, MetaMask, and Kraken.

2. The campaign has led to 'a few million views in the EU alone' and also targets Asian crypto and financial institutions.

3. The malware uses 'unique anti-evasion methods' to avoid detection and collects sensitive crypto-related user information.

4. The malware operates using JavaScript, requiring no victim input, and can manipulate crypto-related web extensions.

5. Check Point warns that the malware is effective at gathering data, including user keyboard inputs and frequently visited websites.

Description

Over 10 million have been potentially targeted by a malware campaign designed to steal crypto and credentials, say cybersecurity researchers at Check Point.

>> go to origin page

More Reading