Crypto wallets outside five CIS countries are under threat from a new Trojan – Bits Media

New Trojan virus Mars Stealer attacks browser-based crypto wallets. The malware works selectively, sparing computers and gadgets with the system language of one of the five CIS countries.

Digital security researcher under the nickname 3xp0rt published on his blog article, in which he states, that Mars Stealer is an updated version of the Oski Trojan, released back in 2019 year and intended to steal information.

Getting into a computer or other device, virus, It is said in the article, scans the tongue first, on which the system runs. If it matches the identifiers of Azerbaijani languages, Belarus, Kazakhstan, Russia or Uzbekistan, then the program leaves the system, without committing any harmful actions. For the rest of the world, the author states, Trojan is dangerous.

According to 3xp0rt, The virus is designed for browsers based on the open source Chromium: Google Chrome, Microsoft Edge, Brave, Vivaldi and dozens of others.

Security has never been the strong point of digital asset storage, the author of the study states, but the new virus directly targets MetaMask, Coinbase Wallet, Binance Chain Wallet and about others 40 crypto wallets.

The Trojan is distributed through file sharing services and torrents.. It sells for $140 on darknet forums, And that means, that attackers can easily gain access to Mars Stealer.

Recall, in mid-January, Opera, which uses its own program code, introduced a browser for the Web 3.0 with a built-in cryptocurrency wallet called Crypto Browser Project.