Crypto users warned as ads push malware-laden crypto apps

Key Points

1. The 'JSCEAL' malware campaign has been active since at least March 2024, impersonating apps like Binance, MetaMask, and Kraken.

2. The campaign has led to 'a few million views in the EU alone' and also targets Asian crypto and financial institutions.

3. The malware uses 'unique anti-evasion methods' to avoid detection and collects sensitive crypto-related user information.

4. The malware operates using JavaScript, requiring no victim input, and can manipulate crypto-related web extensions.

5. Check Point warns that the malware is effective at gathering data, including user keyboard inputs and frequently visited websites.