Fake Malware Blocker Had Been Targeting Blockchain.com, MyEtherWallet Users
Besides the many scams and hacks that crypto users have learned to be cautious of, there is also the problem of malware and cryptojacking, in which a user’s computer system is invaded by malicious software which uses it to mine cryptocurrency without their consent. As a result of this, some computer owners are now installing anti-malware software on their systems.
Unfortunately, criminals have decided to take advantage of this as well as it has been revealed that a Google Chrome extension had been parading as an anti-malware program in order to get users to participate in a fake airdrop in order to steal their private keys.
The extension in question is known as NoCoin and it was publicly exposed by Harry Denley of EtherscamDB. According to his report, the program had been designed to look like an anti-malware software.
Once installed, users would be asked to provide private keys for their Crypto wallets, through which the criminals could access and steal from them. An interesting detail from the saga is the fact that the program seemed to target users of MyEtherWallet (MEW) and Blockchain.com, which are popular crypto wallet providers.
To throw off suspicions, the Programme initially appeared to be doing the work it had promised.
“FROM THE START, IT LOOKED LIKE IT DID WHAT IT SHOULD — IT WAS DETECTED VARIOUS CRYPTOJACKING SCRIPTS (COINHIVE, MINERALT, WEBMINERPOOL) AND THERE WAS A NICE UI TO LET ME KNOW IT WAS DOING ITS JOB,” DENLEY SAYS.
Then, it would ask for a public address through which it would check to see if the user had any Huobi airdrop tokens after which the user would be asked to impute their private wallet keys. If they did this, they would lose their funds. Even the so-called ERC20 Ethereum network-based that had been Offered to customers are actually worthless.
The extension had been downloaded over 200 times before it was reported to Google and taken down.
Phishing For Coins
Phishing scams are one of the oldest tricks in the internet books and are still being used today, whether to gain access to people’s email addresses, social media pages or bank accounts.
Most internet users, however, are familiar with how phishing scams work and know how to protect themselves. With the advent of Cryptocurrency, there is a new and vulnerable demographic that isn’t quite as educated which makes them a likely target for these criminals.