The main targets of the invasions involving the screenshot-reading malware identified by kaspersky researchers are users in the United Arab Emirates, Europe, and Asia. This conclusion is based on both the operational areas of the infected apps and the technical analysis of the malware [1[1[1[1].
The virus seeks specific keywords in images across various languages, including Portuguese, Chinese, Japanese, Korean, English, Czech, French, Italian, and Polish [1[1[1[1].
This malware uses optical character recognition (OCR) to review a device’s photo library, specifically looking for screenshots of recovery phrases for crypto wallets. It was found on both the Apple App Store and Google play Store, making it a significant concern for users of both iOS and Android devices [2[2[2[2, 3].
Malware Targeting Crypto wallets Found on App Stores
Table of Contents
In a recent discovery, cybersecurity experts have identified a dangerous type of malware that can read screenshots of recovery phrases for crypto wallets. This malware has been found on both the Apple App Store adn Google Play Store, posing a meaningful threat to users of iOS and Android devices.
Interview with Cybersecurity Expert, Dr. Alexei Milkov
senior Editor, world-Today-News.com: Dr. Milkov, thank you for joining us today. Could you start by explaining what this new malware does?
Dr. Alexei Milkov: Thank you for having me. This malware, often referred to as “screenshot-readingware,” uses optical character recognition (OCR) technology to scan through a device’s photo library. Its primary target is screenshots of recovery phrases for crypto wallets. these phrases are crucial for accessing crypto assets, and if they fall into the wrong hands, users could lose their digital currencies.
Senior Editor, World-Today-News.com: How does this malware manage to infiltrate so many devices?
Dr. Alexei Milkov: This malware is distributed through seemingly legitimate apps available on major app stores. Users download these apps, thinking they are safe, but in reality, the apps contain malicious code that gains access to the device’s photo library. The apps are designed to look harmless, making it arduous for users to detect the threat.
Senior Editor,World-Today-News.com: what specific languages is the malware looking for in these screenshots?
Dr.Alexei Milkov: The malware seeks specific keywords in images across various languages, including Portuguese, Chinese, Japanese, Korean, English, Czech, French, Italian, and Polish. this broad language support indicates that the creators are targeting a global audience.
Senior Editor, World-Today-news.com: How can users protect themselves from this type of malware?
Dr. Alexei Milkov: First and foremost, users should be cautious about the apps they download. Only download apps from trusted sources and check reviews and ratings before installing. Additionally, avoid taking screenshots of sensitive details like recovery phrases and store them on your device. If you must take a screenshot, delete it instantly after using it. keep your device’s software up-to-date to ensure you have the latest security patches.
senior Editor, World-Today-News.com: What steps can app stores take to prevent such malware from being distributed?
Dr. Alexei Milkov: App stores need to implement stricter vetting processes for the apps they host. This includes using advanced malware detection tools and regularly auditing apps for suspicious activity. Additionally, user reports should be taken seriously, and any potential threats should be investigated promptly.
Conclusion
In this interview, Dr. Alexei Milkov provided valuable insights into the latest threat targeting crypto wallet recovery phrases. By understanding how this malware operates and taking proactive measures,users can better protect their digital assets.As cyber threats continue to evolve, vigilance and awareness are key to staying safe in the digital world.
