Hi guys,

Cryptocurrency wallet users should be wary of a newly-discovered malware called “Copy-Paste Heist.” The malware targets crypto wallet addresses and replaces them with the attacker’s address, leading to stolen funds. Security researchers from ESET have identified the stealthy malware, which injects itself into the victim’s clipboard and alters copied wallet addresses allowing the attacker to steal crypto funds.

Here’s a summary of the key points:

  • The malware is distributed through fake software installers and malicious email attachments.
  • Once installed, it monitors the clipboard for specific patterns related to cryptocurrency wallet addresses.
  • When a user copies a wallet address, the malware replaces it with the attacker’s address, causing funds to be sent to the wrong destination.
  • The malware is capable of targeting multiple cryptocurrencies, including Bitcoin, Ethereum, and Litecoin.
  • So far, the attackers have managed to steal over $100,000 worth of cryptocurrencies.

What is a clipboard 🙂
A clipboard is a temporary storage area within your computer or mobile device’s operating system that allows you to copy and paste text, images, or other data between applications. When you copy information, it is stored in the clipboard, making it available to paste elsewhere. The attackers behind the Copy-Paste Heist take the data straight out of your clipboard. It is very smart.

To stay safe from clipboard injection attacks like Copy-Paste Heist, follow these tips:

  • Always verify the wallet address before sending any cryptocurrency transactions. Double-check that the address you’re pasting matches the intended recipi
  • Be cautious with email attachments, especially from unknown senders, and avoid downloading files from untrusted sources.
  • Keep your operating system and software updated with the latest security patches.
  • Avoid using public Wi-Fi networks, as they may expose your device to potential attackers.
  • Be cautious when installing software and only download applications from trusted sources.
  • Consider using a hardware wallet for storing cryptocurrencies, as they provide an additional layer of security.

By following these safety tips, you can protect your cryptocurrency assets from clipboard injection attacks like the Copy-Paste Heist. Remember, if you have any questions or need specific advice about your privacy and security, you can contact the Incognito Privacy Care team using the contact options within the app. We are always available to assist and guide you in safeguarding your digital assets and privacy.

Talk soon,

Max