• A new ransomware attack named Panda has reared its head, threatening the safety of the cryptocurrency ecosystem.
• This ransomware has set its sights on compromising cryptocurrency wallets and also goes the extra mile in targeting user details on Telegram and Discord.
• Discovered by Trend Micro, a cyber-security firm, the security breach begins with a spam message with a malicious attachment.
• The reason for the increasing number of crypto wallet attacks has been linked to the remarkable increase in the value of cryptocurrencies and large numbers of new crypto users.

New malware is on the block terrorizing the cryptocurrency industry and compromising the data of thousands of users. The malware was discovered by Trend Micro, a cyber-security firm that discovered its modus operandi and primary targets. While cryptocurrency wallets are the primary target, the ransomware also targets user details of platforms such as Discord, NordVPN, and Steam.

What You Should Know About the Panda Crypto Stealer

Cryptocurrency users should keep their guard up as cybercriminals have devised a new manner of obtaining personal info and illegal means of gaining access to accounts through ransomware. Called Panda Stealer, this was discovered by Trend Micro, a firm that specializes in cyber-security.

According to Trend Micro, Panda Stealer acts like a Trojan horse, latching into the system to gain access to sensitive details like usernames and passwords to bypass the security of blockchain. The malware is usually distributed through emails or discord links with malicious attachments.

At its core, the attachment makes use of PowerShell scripts to download an encoded Panda Stealer without files into the computer. This is done through spam emails and through Discord links which resemble a proposal about cryptocurrencies that are designed to bait a user into accepting it.

According to Trend Micro, this method is not a new one, and file-less loading is well known in the industry but the novelty is the targeting of data theft. Through this method, the Panda Stealer scours the system for records of private keys and previous transactions from crypto wallets. In addition to crypto wallets, accounts on platforms like Discord, NordVPN, and Steam are also targeted.

To defend against this scourge Trend Micro suggest the same security measures useful in many other cyber-attacks such as not clicking or opening attachments from suspicious emails and ensuring that software is upgraded to the latest updates.

The cyber-security firm advised that users should protect their cryptocurrency wallets through the use of strong unique passwords and use “multifactor authentication. It further suggested that long-term investors should consider “hardware-based or offline wallets” to store their cryptocurrencies.

On the Flipside

• DeFi Protocol, Spartan Protocol, suffered losses of up to $30 million following a security breach on the platform.
• The ingenious attack occurred as a result of an error in the calculation of the liquidity share when the pool token is burned, according to a report by PeckShield, a blockchain security company.
• This comes just weeks after DeFi exchange, Uranium, lost $50 million in an exploit.

Cryptocurrencies and Cyber Attacks

In recent years, there has been a growing number of cyber-attacks in the cryptocurrency ecosystem which is a worrying trend for the nascent industry. The reason for the spike in criminal activity may be attributed to the dizzying figures associated with cryptocurrencies as the cryptocurrency market capitalization went on to exceed the $2 trillion mark.

Another reason for the growing trend may be linked to the decentralized nature of the crypto ecosystem which creates an absence of a central body to reverse malicious transactions.

Notable crypto hacks that have plagued the industry include the Bitfinex hack of 2016 in which 119,756 Bitcoins were stolen and the Coincheck hack of 2018 which resulted in losses of up to $530 million. Others include the Dao hack of 2016, Mt, Gox hack, and the first Allinvain crypto hack.