名為 Styx Stealer 的新型惡意軟體瞄準加密貨幣錢包

網路安全解決方案供應商 Check Point Research 發現了一個名為 Styx Stealer 的新惡意軟體。新發現的惡意軟體可以透過一種稱為剪輯的機制竊取大量材料，包括加密貨幣。

Cybersecurity solutions provider Check Point Research has uncovered a new malware called Styx Stealer. The recently discovered malware is capable of stealing a wide range of data, including cryptocurrency, using a technique known as clipping. It is available for rent on the developer's website.

網路安全解決方案供應商 Check Point Research 發現了一種名為 Styx Stealer 的新惡意軟體。最近發現的惡意軟體能夠使用一種稱為剪輯的技術來竊取各種數據，包括加密貨幣。它可以在開發商的網站上出租。

Windows users with an up-to-date operating system are protected from the malware, as Styx Stealer relies on a vulnerability in Microsoft Windows Defender that was patched last year.

擁有最新作業系統的 Windows 用戶可以免受惡意軟體的侵害，因為 Styx Stealer 依賴去年修補的 Microsoft Windows Defender 中的漏洞。

Malware updates to include crypto theft

惡意軟體更新包括加密竊盜

Styx Stealer was discovered after the developer's data leaked during debugging. It is based on an older malware called Phemedrone Stealer and retains its functionalities, such as stealing saved passwords, cookies, auto-fill data, cryptocurrency wallet details and instant messenger sessions, while adding new detection evasion techniques and a crypto clipper function.

Styx Stealer 是在開發者的調試資料外洩後被發現的。它基於一種名為Phemedrone Stealer 的舊惡意軟體，保留了其功能，例如竊取保存的密碼、cookie、自動填充資料、加密貨幣錢包詳細資訊和即時通訊會話，同時添加了新的檢測規避技術和加密剪輯器功能。

Cryptocurrency clipping involves the malware replacing a crypto recipient's wallet address with the attacker's wallet during a transaction.

加密貨幣剪裁涉及惡意軟體在交易期間用攻擊者的錢包替換加密貨幣接收者的錢包位址。

Related: Fake Zoom malware steals crypto as it's 'stuck' loading, user warns

相關：用戶警告稱，假冒 Zoom 惡意軟體在「卡住」載入時竊取加密貨幣

Launched in April, Styx Stealer can be purchased for $75 per month or $350 for a lifetime license. The pricing and features were displayed on the website styxcrypter.com until Aug. 16, when it was changed to another product. Purchases can be made through Telegram using Bitcoin BTC , Litecoin LTC , Tron TRX , Tether USDT or Moner XMR . At one point, there were also explainer videos on YouTube.

Styx Stealer 於 4 月推出，每月購買價格為 75 美元，終身許可證購買價格為 350 美元。定價和功能一直顯示在 styxcrypter.com 網站上，直到 8 月 16 日，網站更改為其他產品。可以透過 Telegram 使用比特幣 BTC、萊特幣 LTC、Tron TRX、Tether USDT 或 Moner XMR 進行購買。 YouTube 上曾一度出現解說影片。

BTC

比特幣

$58,887

$58,887

LTC

LTC

$66.37

66.37 美元

TRX

TRX

$0.1336

$0.1336

USDT

泰達幣

$1.00

1.00 美元

XMR

XMR

$148

$148

Hacking pays in 2024

2024 年駭客將付出代價

According to Point Research, eight wallets, likely belonging to the Turkey-based Styx Stealer developer, received around $9,500 in crypto payments for the malware in the first two months.

據 Point Research 稱，前兩個月內，八個錢包（可能屬於土耳其 Styx Stealer 開發商）收到了約 9,500 美元的惡意軟體加密貨幣付款。

Check Point Research also obtained the developer's Telegram accounts, email addresses, phone numbers and contacts.

Check Point Research 也獲得了開發者的 Telegram 帳戶、電子郵件地址、電話號碼和聯絡資訊。

In a report released on Aug. 15, Chainalysis stated that legitimate cryptocurrency activity is growing faster than illicit activity, though the value of crypto hacked has increased. This is likely due, at least in part, to the recovery in the price of Bitcoin. The number of hacking incidents in 2024 has only seen a marginal year-over-year increase.

Chainaanalysis 在 8 月 15 日發布的一份報告中表示，儘管加密貨幣被駭客攻擊的價值增加，但合法的加密貨幣活動的成長速度快於非法活動。這可能至少部分歸因於比特幣價格的復甦。 2024 年駭客事件數量較去年同期僅略有增加。

Continue reading Magazine: Pink Drainer creator defends his wallet draining crypto scam kit

繼續閱讀雜誌：《Pink Drainer》創作者為他的錢包耗盡加密貨幣詐騙工具包辯護