Shitcoin Wallet
Many cyber crooks who create malware opt to mask it as legitimate applications and services. This way, it is likely that the threat may manage to remain under the radar of the user and operate for a longer period. One of the most recently spotted threats that operate in this manner is called the Shitcoin Wallet. The authors of the Shitcoin Wallet claim that this application will help you manage your cryptocurrency funds, namely ETH (Ethereum) and ERC20 tokens. The Shitcoin Wallet is available both as an application and as a Google Chrome extension. So far, it would appear that the Shitcoin Wallet Google Chrome extension has approximately 1,000 installs.
The $8 Giveaway
The creators of the Shitcoin Wallet have put a significant amount of effort into making this threatening application seem legitimate and reliable. In December 2019, the cybercriminals announced that they are giving away 0.05 ETH, which is about $8, to celebrate Christmas. If the users want to claim the money, they are urged to visit the twitter account of the Shitcoin Wallet’s authors and retweet one of their tweets, while also tagging three of their friends. They also prompt users to join their Telegram community. They have gone as far as building a website, too, as this would make their application seems genuine.
How The Shitcoin Wallet Operates
The authors of the Shitcoin Wallet are claiming that their service was created to aid users in managing their cryptocurrency finances. However, this is not the case. The end goal of the Shitcoin Wallet application is to harvest login details linked to cryptocurrency wallets and other data such as private keys. This is done via planting a JavaScript string into five different cryptocurrency exchanges that are rather popular in the world of crypto-mining. The information that the Shitcoin Wallet threat collects will be transferred to the C&C (Command & Control) server of the authors of the application. Initially, it was believed that the Shitcoin Wallet would inject the JavaScript code in question into a total of 77 websites. However, after studying the campaign, cybersecurity researchers discovered that the Shitcoin Wallet only compromises five sites.
Some users who claim to have fallen victims to the Shitcoin Wallet threatening application state that the threat has planted a data-locking Trojan on their systems, but these reports have not yet been confirmed. If you are trading or mining cryptocurrencies, you need to take extra precautions to secure your system and your data. Never trust unknown sources that claim to offer legitimate free services that will help you manage your cryptocurrency funds. Most importantly, make sure you have installed a reputable anti-malware solution that will ensure your safety online.
