Avast researchers have warned of a new virus that steals cryptocurrencies from Google Chrome users

Researchers from Avast, an information security company, have warned users about the spread of a new VenomSoftX malicious extension for the Google Chrome browser that steals cryptocurrencies.

According to Avast experts, the VenomSoftX virus has been known since 2020, but since the beginning of 2022, there has been a sharp increase in the number of infections — more than 93,000. VenomSoftX and its copy, ViperSoftX, are spread through pirated distribution of cracked games and software.

The malicious extension is disguised as Google Sheets 2.1 and Update Manager. The software helps hackers to track which cryptocurrency exchanges are visited by the user and replace API requests to steal cryptocurrencies. VenomSoftX also monitors the contents of the clipboard in search of addresses and passwords to cryptocurrency wallets.

The list of websites that the virus monitors includes: Binance, Coinbase, Gate. io, Kucoin, and Blockchain.com. Cybersecurity researchers estimate that the hackers managed to steal at least $ 130,000 worth of cryptocurrencies.

In early November, cybersecurity experts found out that hacking user passwords is the most popular method of hacker attacks, and anyone can become a victim. According to the Microsoft Digital Defense Report 2022, about 1,000 password-stealing cyberattacks occur every second in the world. In 2022, the number of password cracking attacks increased by 74%, primarily due to the Russian-Ukrainian war, in which hackers play an important role. Thus, the Anonymous hacker group declared cyber war on the Russian government. From time to time, they publish secret information from the archives of the Russian Federation and contacts of high-ranking officials, so the representatives of the association are called «modern-day Robin Hoods.»