Telegram detected new malware that steals cryptocurrency from users
The attackers distribute it in the messenger's crypto chats

28.12.2021 - 11:50
148
1 min
0
What’s new? The administrator of the Immunefi service reported on Twitter that the scammers have started actively spreading a new virus on Telegram. The malware may be called “Smokes night,” and the messenger’s users are advised to disable files autoloading.
Warning ❗️ An attack on thematic @telegram crypto chats ongoing now. The attackers use an account named "Smokes Night" to spread Echelon malware by dropping a file into the chat room.TLDR: Disable auto-downloading in Telegram settings right now.👇 See the thread below 👇— CIA Officer (@officer_cia) December 25, 2021
How does the virus work? The malware does not require installation, the attackers can connect to the user's computer immediately after downloading the infected file. The hackers can use the virus to hijack controls and take screenshots.
What other fraud schemes have been discovered? One of the Telegram users described how the attackers wanted to steal his Binance account. While working on the exchange, his browser suddenly closed, and when he tried to log in again using two-factor authentication, the system gave an error message. The user guessed that he was on a fake version of the site, although the link was real. He later found out that his computer had been infected with a virus.
Useful material?
Incidents
The attacker conducted a flash loan attack by exploiting vulnerabilities in the protocol.
Jul 21, 2023
Market
The former CEO of the exchange discussed building a bunker and conducting genetic experiments with his younger brother
Jul 21, 2023
Incidents
Hayden Adams restored the account nine hours later
Jul 21, 2023
Market
Chainlink CEO Sergey Nazarov predicted the growth of the blockchain industry by trillions of dollars
Jul 20, 2023
Market
The company stopped accepting bitcoin payments in May 2021
Jul 20, 2023
Politics
The bill is designed “to fight the rise in crypto-facilitated crime”
Jul 20, 2023