Telegram detected new malware that steals cryptocurrency from users

The attackers distribute it in the messenger's crypto chats

28.12.2021 - 11:50

311

1 min

What’s new? The administrator of the Immunefi service reported on Twitter that the scammers have started actively spreading a new virus on Telegram. The malware may be called “Smokes night,” and the messenger’s users are advised to disable files autoloading.

Warning ❗️ An attack on thematic @telegram crypto chats ongoing now. The attackers use an account named "Smokes Night" to spread Echelon malware by dropping a file into the chat room.TLDR: Disable auto-downloading in Telegram settings right now.👇 See the thread below 👇— CIA Officer (@officer_cia) December 25, 2021

How does the virus work? The malware does not require installation, the attackers can connect to the user's computer immediately after downloading the infected file. The hackers can use the virus to hijack controls and take screenshots.

What other fraud schemes have been discovered? One of the Telegram users described how the attackers wanted to steal his Binance account. While working on the exchange, his browser suddenly closed, and when he tried to log in again using two-factor authentication, the system gave an error message. The user guessed that he was on a fake version of the site, although the link was real. He later found out that his computer had been infected with a virus.

Author: