Kaspersky Finds OkoBot Threat to Crypto Users
Kaspersky has uncovered a new malicious campaign called OkoBot that targets cryptocurrency users. It employs sophisticated techniques, including TookPS malware, to extract recovery phrases and monitor Chromium-based browsers. The campaign involves over 20 tools and malicious programs, such as Rilide for data theft and OkoSpyware for keylogging and capturing content from application windows. The campaign has affected hundreds of victims across more than 25 countries, with the highest number of affected users in Brazil, Vietnam, Canada, Mexico, and Turkey. It remains an ongoing threat, particularly through social engineering attacks and fake software distributing malware. The campaign also monitors digital wallets and steals recovery phrases from applications like Trezor and Ledger via specially crafted phishing pages. Kaspersky recommends following protective measures such as avoiding the use of untrusted programs, updating systems regularly, using strong security solutions, and enabling multi-factor authentication to prevent breaches.
تنويه: هذا ملخص تم إنشاؤه بواسطة الذكاء الاصطناعي
comments.heading