FlagThis

Cybersecurity researchers at CyberArk have uncovered a new cryptojacking malware campaign called MassJacker. This sophisticated malware targets users who download pirated software, particularly from websites known for distributing malware, such as pesktop[.]com. MassJacker operates as a clipboard hijacker, monitoring the Windows clipboard for copied cryptocurrency wallet addresses.

When a user copies an address, the malware stealthily replaces it with one controlled by the attackers, resulting in the victim unknowingly sending cryptocurrency to the malicious actors instead of the intended recipient. The investigation revealed that MassJacker has been associated with over 750,000 unique cryptocurrency addresses, with one wallet holding over $300,000.


References :

• Secure Bulletin: MassJacker malware targets cryptocurrency of piracy users
• Cyber Security News: MassJacker Clipper Malware Exploits Pirated Software Installations
• gbhackers.com: MassJacker Clipper Malware Targets Users Installing Pirated Software
• securityaffairs.com: New MassJacker clipper targets pirated software seekers

Classification:

• HashTags: #MassJacker #CryptoJacking #PiratedSoftware #Malware #Cybersecurity
• Company: CyberArk
• Target: Users of Pirated Software
• Attacker: MassJacker
• Product: Pirated Software
• Feature: Clipping
• Malware: MassJacker
• Type: Malware
• Severity: Medium