Phorpiex a new malicious botnet has been discovered
The crypto clipper changes the recipient addresses when sending cryptocurrency
17.12.2021 - 12:20
306
1 min
0
What’s new? Check Point Research (CPR), a cyberthreat research company, reports a new variant of Phorpiex, a botnet known for spamming, extortion, and cryptocurrency theft. The new variant, dubbed Twizt, has stolen more than $500 000 worth of cryptocurrency in a year.
How does Twizt work? According to CPR, the botnet uses a technique called “cryptocurrency clipping.” The malware replaces the recipient's wallet address with that of the attacker. Twizt operates without active management and control servers, meaning that each infected computer can expand the botnet. Since the botnet uses a peer-to-peer model, it can receive the commands and updates from other devices hosting the virus.
How much did the attackers manage to steal? Between November 2020 and November 2021, Phorpiex bots hijacked 969 transactions. The hackers stole 3,64 BTC, 55,87 ETH, and $55 000 in ERC20 tokens. The largest intercepted transaction was 26 ETH.
Useful material?
Market
Earlier, the community criticized the project for its lack of transparency, which led to a sharp drop in the HYPE token price
Jan 8, 2025
Market
Rising US Treasury bond yields are negatively affecting risk assets
Jan 8, 2025
Mining
The Avalon Mini 3 is available for pre-order at $899
Jan 8, 2025
Market
The exchange obtained the documents as part of the Freedom of Information Act proceeding
Jan 6, 2025
Market
According to the preliminary plan, the free coin giveaway will take place in January 2025
Dec 27, 2024
Market
The fund’s issuer will be Donald Trump associate Vivek Ramaswamy’s Strive company
Dec 27, 2024