Blogpost: Ethereum Threat Actors Part 2 — ClipboardWalletHijacker Malware Still Active.

---

2019/02/18 @ QuoScient Medium

In part two of our mini-series (see part #1) describing how cybercrime actors are using the Ethereum blockchain for fraudulent means, we analyze a clipboard hijacker malware targeting Bitcoin and Ethereum users. This malware, renamed ClipboardWalletHijacker by Qihoo360 Security Center, was first discovered in June 2018, after having infected 300 thousand computers within a week.

1. Quick ClipboardWalletHijacker Analysis
2. Hijacked Ethereum Transactions
3. Cryptocurrency Exchange Used by the Actor
4. Packers & Variants
5. Conclusion
6. Indicator of Compromise

---

link / pdf