<\/p>\n
An advisory report issued by government agencies in the United States and the United Kingdom warns users to beware of new malware being used to target crypto wallets and exchanges.\u00a0<\/p>\n
The U.S. National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and the U.K.\u2019s National Cyber Security Centre (NCSC), which is a part of the Government Communications Headquarters (GCHQ) collaborated to release<\/a> a joint report about the malware dubbed the \u201cInfamous Chisel.\u201d <\/p>\n According to the report, the malware has been tied to the activities of Sandworm, a cyberwarfare unit working under the GRU, Russia\u2019s military intelligence agency. The joint report also noted that Sandworm has been targeting the Android devices of the Ukrainian military, using the new malware to extract information from compromised mobile devices. <\/p>\n The report noted that some of the data extracted by the malware included data within the directories of the Binance and Coinbase exchange applications and the Trust Wallet application. According to the report, every file in the directories listed is being exfiltrated regardless of type.\u00a0<\/p>\n The joint report also noted that the Infamous Chisel\u2019s components were developed with only little regard for the \u201cconcealment of malicious activity.\u201c The malware lacks stealth techniques to disguise its activities. However, this may be because of the lack of host-based detection systems for Android devices, according to the report. <\/p>\n Related: <\/em><\/strong>FBI seizes almost $2M of crypto assets in 3 months<\/em><\/strong><\/a><\/p>\n Meanwhile, almost $1 billion has been lost to exploits, hacks and scams in 2023<\/a>. On Sept. 1, blockchain security firm CertiK reported that around $997 million had been lost year-to-date. In August alone, around $45 million were lost to such attacks. Despite the amount, the losses were significantly lower than the previous month. In July, more than $486 million worth of digital assets were lost to malicious attacks. <\/p>\n