Microsoft Names Info-Stealers That Target Crypto Wallets 'Cryware'

Microsoft blog: The steep rise in cryptocurrency market capitalization, not surprisingly, mirrors a marked increase in threats and attacks that target or leverage cryptocurrencies. But Microsoft researchers are observing an even more interesting trend: the evolution of related malware and their techniques, and the emergence of a threat type we're referring to as cryware. Cryware are information stealers that collect and exfiltrate data directly from non-custodial cryptocurrency wallets, also known as hot wallets. Because hot wallets, unlike custodial wallets, are stored locally on a device and provide easier access to cryptographic keys needed to perform transactions, more and more threats are targeting them.

Criware

[darkain]

I wonder if Criware has anything to say about that...
https://www.criware.com/ [criware.com]

Re:

[GuB-42]

Also Crytek, the game studio that makes Crysis, the CryEngine, and made the first Far Cry.

Cryware because...

[devslash0]

... it makes all the crypto kids cry.

Re:

[account_deleted]

Comment removed based on user account deletion

Re:

[account_deleted]

Comment removed based on user account deletion

Re:

[tlhIngan]

My wallet generally has twenty to fifty dollars in it - maybe more if I'm taking a road trip or going to the casino. In general, I don't carry hundreds or thousands of dollars around in my wallet.

Virtual wallet, meet virtual pickpocket.

Generally a good idea in the US in general, thanks to civil asset forfeiture laws that pretty much allow the cops to take all your money without recourse. Well you could sue to get it back, but that costs money.

And the stop doesn't even have to be a legal stop - any interacti

Re:That's what they get for being stupid.

[ceoyoyo]

Clearly one should leave most of their crypto-money in an account managed by professionals. Like MtGox. Er, no, maybe Wormhole? Oh, okay, how about KuCoin?

Just like regular money, it doesn't seem like a better idea to give it to random dudes on the Internet who will look after it super well for you, promise. There aren't any regulated banks. Probably best to put the private keys on paper in a safe deposit box.

Just give us all your wallets

[AntisocialNetworker]

Call me a cynic, but this is a cloud services company finding problems in not storing your wallet in the cloud.

Microsoft names info-stealers

[RitchCraft]

Strange that they would call themselves out?