New Malware Called Styx Stealer Targets Cryptocurrency Wallets

New malware called Styx Stealer has been uncovered by cybersecurity solutions provider Check Point Research. The newly discovered malware can steal a vast array of material, including cryptocurrency, through a mechanism known as clipping.

Cybersecurity solutions provider Check Point Research has uncovered a new malware called Styx Stealer. The recently discovered malware is capable of stealing a wide range of data, including cryptocurrency, using a technique known as clipping. It is available for rent on the developer's website.

Windows users with an up-to-date operating system are protected from the malware, as Styx Stealer relies on a vulnerability in Microsoft Windows Defender that was patched last year.

Malware updates to include crypto theft

Styx Stealer was discovered after the developer's data leaked during debugging. It is based on an older malware called Phemedrone Stealer and retains its functionalities, such as stealing saved passwords, cookies, auto-fill data, cryptocurrency wallet details and instant messenger sessions, while adding new detection evasion techniques and a crypto clipper function.

Cryptocurrency clipping involves the malware replacing a crypto recipient's wallet address with the attacker's wallet during a transaction.

Related: Fake Zoom malware steals crypto as it's 'stuck' loading, user warns

Launched in April, Styx Stealer can be purchased for $75 per month or $350 for a lifetime license. The pricing and features were displayed on the website styxcrypter.com until Aug. 16, when it was changed to another product. Purchases can be made through Telegram using Bitcoin BTC , Litecoin LTC , Tron TRX , Tether USDT or Moner XMR . At one point, there were also explainer videos on YouTube.

BTC

$58,887

LTC

$66.37

TRX

$0.1336

USDT

$1.00

XMR

$148

Hacking pays in 2024

According to Point Research, eight wallets, likely belonging to the Turkey-based Styx Stealer developer, received around $9,500 in crypto payments for the malware in the first two months.

Check Point Research also obtained the developer's Telegram accounts, email addresses, phone numbers and contacts.

In a report released on Aug. 15, Chainalysis stated that legitimate cryptocurrency activity is growing faster than illicit activity, though the value of crypto hacked has increased. This is likely due, at least in part, to the recovery in the price of Bitcoin. The number of hacking incidents in 2024 has only seen a marginal year-over-year increase.

Continue reading Magazine: Pink Drainer creator defends his wallet draining crypto scam kit