名为 Styx Stealer 的新型恶意软件瞄准加密货币钱包

网络安全解决方案提供商 Check Point Research 发现了名为 Styx Stealer 的新恶意软件。新发现的恶意软件可以通过一种称为剪辑的机制窃取大量材料，包括加密货币。

Cybersecurity solutions provider Check Point Research has uncovered a new malware called Styx Stealer. The recently discovered malware is capable of stealing a wide range of data, including cryptocurrency, using a technique known as clipping. It is available for rent on the developer's website.

网络安全解决方案提供商 Check Point Research 发现了一种名为 Styx Stealer 的新恶意软件。最近发现的恶意软件能够使用一种称为剪辑的技术窃取各种数据，包括加密货币。它可以在开发商的网站上出租。

Windows users with an up-to-date operating system are protected from the malware, as Styx Stealer relies on a vulnerability in Microsoft Windows Defender that was patched last year.

拥有最新操作系统的 Windows 用户可以免受恶意软件的侵害，因为 Styx Stealer 依赖于去年修补的 Microsoft Windows Defender 中的漏洞。

Malware updates to include crypto theft

恶意软件更新包括加密盗窃

Styx Stealer was discovered after the developer's data leaked during debugging. It is based on an older malware called Phemedrone Stealer and retains its functionalities, such as stealing saved passwords, cookies, auto-fill data, cryptocurrency wallet details and instant messenger sessions, while adding new detection evasion techniques and a crypto clipper function.

Styx Stealer 是在开发者的调试数据泄露后被发现的。它基于一种名为 Phemedrone Stealer 的旧恶意软件，保留了其功能，例如窃取保存的密码、cookie、自动填充数据、加密货币钱包详细信息和即时消息会话，同时添加了新的检测规避技术和加密剪辑器功能。

Cryptocurrency clipping involves the malware replacing a crypto recipient's wallet address with the attacker's wallet during a transaction.

加密货币剪裁涉及恶意软件在交易期间用攻击者的钱包替换加密货币接收者的钱包地址。

Related: Fake Zoom malware steals crypto as it's 'stuck' loading, user warns

相关：用户警告称，假冒 Zoom 恶意软件在“卡住”加载时窃取加密货币

Launched in April, Styx Stealer can be purchased for $75 per month or $350 for a lifetime license. The pricing and features were displayed on the website styxcrypter.com until Aug. 16, when it was changed to another product. Purchases can be made through Telegram using Bitcoin BTC , Litecoin LTC , Tron TRX , Tether USDT or Moner XMR . At one point, there were also explainer videos on YouTube.

Styx Stealer 于 4 月推出，每月购买价格为 75 美元，终身许可证购买价格为 350 美元。定价和功能一直显示在 styxcrypter.com 网站上，直到 8 月 16 日，该网站更改为其他产品。可以通过 Telegram 使用比特币 BTC、莱特币 LTC、Tron TRX、Tether USDT 或 Moner XMR 进行购买。 YouTube 上曾一度出现过讲解视频。

BTC

比特币

$58,887

$58,887

LTC

LTC

$66.37

66.37 美元

TRX

TRX

$0.1336

$0.1336

USDT

泰达币

$1.00

1.00 美元

XMR

XMR

$148

$148

Hacking pays in 2024

2024 年黑客将付出代价

According to Point Research, eight wallets, likely belonging to the Turkey-based Styx Stealer developer, received around $9,500 in crypto payments for the malware in the first two months.

据 Point Research 称，前两个月内，八个钱包（可能属于土耳其 Styx Stealer 开发商）收到了约 9,500 美元的恶意软件加密货币付款。

Check Point Research also obtained the developer's Telegram accounts, email addresses, phone numbers and contacts.

Check Point Research 还获得了开发者的 Telegram 帐户、电子邮件地址、电话号码和联系方式。

In a report released on Aug. 15, Chainalysis stated that legitimate cryptocurrency activity is growing faster than illicit activity, though the value of crypto hacked has increased. This is likely due, at least in part, to the recovery in the price of Bitcoin. The number of hacking incidents in 2024 has only seen a marginal year-over-year increase.

Chainaanalysis 在 8 月 15 日发布的一份报告中表示，尽管加密货币被黑客攻击的价值有所增加，但合法的加密货币活动的增长速度快于非法活动。这可能至少部分归因于比特币价格的复苏。 2024 年黑客事件数量同比仅略有增加。

Continue reading Magazine: Pink Drainer creator defends his wallet draining crypto scam kit

继续阅读杂志：《Pink Drainer》创作者为他的钱包耗尽加密货币诈骗工具包辩护