Malicious package masquerades as PDF converter.
Attackers are attempting to compromise users of the Atomic and Exodus cryptocurrency wallets with a PDF to Microsoft Word document converter.
According to ReversingLabs researcher Lucija Valentić, who detailed in a report shared with The Hacker News, a pdf-to-office package masquerades as a utility for converting PDF files to Microsoft Word documents. However it includes features to inject malicious code into cryptocurrency wallet software associated with Atomic Wallet and Exodus.
Such a package has also been made to enable continuous pilfering of crypto assets even after its removal, said Valentić. "The only way to completely remove the malicious trojanised files from the Web3 wallets' software would be to remove them completely from the computer and re-install them," Valentić added.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.
