Telegram: This malware can steal cryptocurrencies by tampering with copy/paste

Avast's cybersecurity research team recently spotted new malware dubbed 'HackBoss'. Once downloaded from the social network Telegram, it is able to monitor the clipboard of the victim's computer, reports Numerama. All copy/paste or cut/paste operations pass through the clipboard.

The program is configured to detect cryptocurrency wallet addresses, made up of more than twenty random characters. Sequences that are difficult to remember, which users often copy for fear of making a typing error. Only, the victims of this malware actually paste a completely different address, belonging to the crooks. The latter will thus receive the money that was supposed to be sent to the intended recipient.

Trap hackers

Of course, the victim, by being attentive, may notice that the characters of the address are no longer the same and not validate the transaction. However, several cryptocurrency owners have been fooled. Thanks to Hack Boss, the scammers have collected, since November 2018, more than 8.4 Bitcoin, 6.9 Ethereum or even 2,300 Dogecoin, say Avast researchers, or around 560,000 dollars…

The malware spreads via a Telegram channel named “Hack Boss”. It claims to transmit hacking tools such as "gift card code generators, software for sending phishing or even tools for cracking passwords", specifies Numerama. The victims, mostly from Nigeria, the United States, Russia or India, find it difficult to denounce the facts to the authorities, when they were visibly preparing to also commit illicit activities. .