It has been discovered that a recent malware campaign used the Satacom downloader as a delivery mechanism to spread covert malware capable of stealing cryptocurrencies using a rogue extension for Chromium-based browsers.
According to Kaspersky researchers Haim Zigel and Oleg Kupreev, the malware installed by the Satacom downloader is primarily designed to steal BTC from the victim’s account by performing web injections into specific cryptocurrency websites.
Users of Coinbase, Bybit, KuCoin, Huobi, and Binance who are mostly in Brazil, Algeria, Turkey, Vietnam, Indonesia, India, Egypt, and Mexico are the campaign’s target audience.
The Legion Loader, also known as the Satacom Downloader read more Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency.
Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensive coverage of recent cyber attacks, cybersecurity awareness, and the latest cybersecurity news to safeguard your digital world.