Breaking News
Get Actionable Insights with InvestingPro+: Start 7 Day FREE Trial Register here
Investing Pro 0
Ad-Free Version. Upgrade your Investing.com experience. Save up to 40% More details

Panda Crypto Stealer – Beware

CryptocurrencyMay 20, 2021 02:30AM ET
Saved. See Saved Items.
This article has already been saved in your Saved Items
 
Panda Crypto Stealer – Beware

  • A new ransomware attack named Panda has reared its head, threatening the safety of the cryptocurrency ecosystem.
  • This ransomware has set its sights on compromising cryptocurrency wallets and also goes the extra mile in targeting user details on Telegram and Discord.
  • Discovered by Trend Micro (OTC:TMICY), a cyber-security firm, the security breach begins with a spam message with a malicious attachment.
  • The reason for the increasing number of crypto wallet attacks has been linked to the remarkable increase in the value of cryptocurrencies and large numbers of new crypto users.

New malware is on the block terrorizing the cryptocurrency industry and compromising the data of thousands of users. The malware was discovered by Trend Micro, a cyber-security firm that discovered its modus operandi and primary targets. While cryptocurrency wallets are the primary target, the ransomware also targets user details of platforms such as Discord, NordVPN, and Steam.

What You Should Know About the Panda Crypto Stealer

Cryptocurrency users should keep their guard up as cybercriminals have devised a new manner of obtaining personal info and illegal means of gaining access to accounts through ransomware. Called Panda Stealer, this was discovered by Trend Micro, a firm that specializes in cyber-security.

According to Trend Micro, Panda Stealer acts like a Trojan horse, latching into the system to gain access to sensitive details like usernames and passwords to bypass the security of blockchain. The malware is usually distributed through emails or discord links with malicious attachments.

At its core, the attachment makes use of PowerShell scripts to download an encoded Panda Stealer without files into the computer. This is done through spam emails and through Discord links which resemble a proposal about cryptocurrencies that are designed to bait a user into accepting it.

According to Trend Micro, this method is not a new one, and file-less loading is well known in the industry but the novelty is the targeting of data theft. Through this method, the Panda Stealer scours the system for records of private keys and previous transactions from crypto wallets. In addition to crypto wallets, accounts on platforms like Discord, NordVPN, and Steam are also targeted.

To defend against this scourge Trend Micro suggest the same security measures useful in many other cyber-attacks such as not clicking or opening attachments from suspicious emails and ensuring that software is upgraded to the latest updates.

The cyber-security firm advised that users should protect their cryptocurrency wallets through the use of strong unique passwords and use “multifactor authentication. It further suggested that long-term investors should consider “hardware-based or offline wallets” to store their cryptocurrencies.

On the Flipside

  • DeFi Protocol, Spartan Protocol, suffered losses of up to $30 million following a security breach on the platform.
  • The ingenious attack occurred as a result of an error in the calculation of the liquidity share when the pool token is burned, according to a report by PeckShield, a blockchain security company.
  • This comes just weeks after DeFi exchange, Uranium, lost $50 million in an exploit.

Cryptocurrencies and Cyber Attacks

In recent years, there has been a growing number of cyber-attacks in the cryptocurrency ecosystem which is a worrying trend for the nascent industry. The reason for the spike in criminal activity may be attributed to the dizzying figures associated with cryptocurrencies as the cryptocurrency market capitalization went on to exceed the $2 trillion mark.

Another reason for the growing trend may be linked to the decentralized nature of the crypto ecosystem which creates an absence of a central body to reverse malicious transactions.

Notable crypto hacks that have plagued the industry include the Bitfinex hack of 2016 in which 119,756 Bitcoins were stolen and the Coincheck hack of 2018 which resulted in losses of up to $530 million. Others include the Dao hack of 2016, Mt, Gox hack, and the first Allinvain crypto hack.

EMAIL NEWSLETTER

Join to get the flipside of crypto

Upgrade your inbox and get our DailyCoin editors’ picks 1x a week delivered straight to your inbox.

[contact-form-7] You can always unsubscribe with just 1 click.

Continue reading on DailyCoin

Panda Crypto Stealer – Beware
 

Related Articles

EOS Climbs 12% As Investors Gain Confidence
EOS Climbs 12% As Investors Gain Confidence By Investing.com - Dec 08, 2021

Investing.com - EOS was trading at $3.6163 by 19:48 (00:48 GMT) on the Investing.com Index on Thursday, up 11.82% on the day. It was the largest one-day percentage gain since...

Add a Comment

Comment Guidelines

We encourage you to use comments to engage with other users, share your perspective and ask questions of authors and each other. However, in order to maintain the high level of discourse we’ve all come to value and expect, please keep the following criteria in mind:  

  •            Enrich the conversation, don’t trash it.

  •           Stay focused and on track. Only post material that’s relevant to the topic being discussed. 

  •           Be respectful. Even negative opinions can be framed positively and diplomatically. Avoid profanity, slander or personal attacks directed at an author or another user. Racism, sexism and other forms of discrimination will not be tolerated.

  • Use standard writing style. Include punctuation and upper and lower cases. Comments that are written in all caps and contain excessive use of symbols will be removed.
  • NOTE: Spam and/or promotional messages and comments containing links will be removed. Phone numbers, email addresses, links to personal or business websites, Skype/Telegram/WhatsApp etc. addresses (including links to groups) will also be removed; self-promotional material or business-related solicitations or PR (ie, contact me for signals/advice etc.), and/or any other comment that contains personal contact specifcs or advertising will be removed as well. In addition, any of the above-mentioned violations may result in suspension of your account.
  • Doxxing. We do not allow any sharing of private or personal contact or other information about any individual or organization. This will result in immediate suspension of the commentor and his or her account.
  • Don’t monopolize the conversation. We appreciate passion and conviction, but we also strongly believe in giving everyone a chance to air their point of view. Therefore, in addition to civil interaction, we expect commenters to offer their opinions succinctly and thoughtfully, but not so repeatedly that others are annoyed or offended. If we receive complaints about individuals who take over a thread or forum, we reserve the right to ban them from the site, without recourse.
  • Only English comments will be allowed.

Perpetrators of spam or abuse will be deleted from the site and prohibited from future registration at Investing.com’s discretion.

Write your thoughts here
 
Are you sure you want to delete this chart?
 
Post
Post also to:
 
Replace the attached chart with a new chart ?
1000
Your ability to comment is currently suspended due to negative user reports. Your status will be reviewed by our moderators.
Please wait a minute before you try to comment again.
Thanks for your comment. Please note that all comments are pending until approved by our moderators. It may therefore take some time before it appears on our website.
 
Are you sure you want to delete this chart?
 
Post
 
Replace the attached chart with a new chart ?
1000
Your ability to comment is currently suspended due to negative user reports. Your status will be reviewed by our moderators.
Please wait a minute before you try to comment again.
Add Chart to Comment
Confirm Block

Are you sure you want to block %USER_NAME%?

By doing so, you and %USER_NAME% will not be able to see any of each other's Investing.com's posts.

%USER_NAME% was successfully added to your Block List

Since you’ve just unblocked this person, you must wait 48 hours before renewing the block.

Report this comment

I feel that this comment is:

Comment flagged

Thank You!

Your report has been sent to our moderators for review
Disclaimer: Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. All CFDs (stocks, indexes, futures) and Forex prices are not provided by exchanges but rather by market makers, and so prices may not be accurate and may differ from the actual market price, meaning prices are indicative and not appropriate for trading purposes. Therefore Fusion Media doesn`t bear any responsibility for any trading losses you might incur as a result of using this data.

Fusion Media or anyone involved with Fusion Media will not accept any liability for loss or damage as a result of reliance on the information including data, quotes, charts and buy/sell signals contained within this website. Please be fully informed regarding the risks and costs associated with trading the financial markets, it is one of the riskiest investment forms possible.
Continue with Google
or
Sign up with Email