))
CYFIRMA Research- SeedSnatcher: Dissecting an Android Malware Targeting Multiple Crypto Wallet Mnemonic Phrases
Manage episode 524837986 series 3472819
Content provided by CYFIRMA. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by CYFIRMA or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Mobile Threat Alert: Crypto Mnemonic Phrase Stealer
SeedSnatcher is a newly uncovered Android malware family targeting the crypto ecosystem, built to steal users’ mnemonic recovery phrases using a sophisticated DisplayOverlay attack
Capabilities:
- Intercepts and exfiltrates seed phrases and private keys from major cryptocurrency wallets
- Presents deceptive wallet-import screens to lure users into entering their recovery phrases
- Communicates with its command-and-control servers via encrypted WebSocket channels
Additional Capabilities:
- Access device files and media
- Read SMS content and monitor messages
- Retrieve call logs and contact lists
- Collect device identifiers, network data, and app details
- Exfiltrate collected information to the C2 over encrypted channels
Link to the Research Report: SEEDSNATCHER : Dissecting an Android Malware Targeting Multiple Crypto Wallet Mnemonic Phrases - CYFIRMA
#CyberSecurity #MobileSecurity #AndroidMalware #CryptoSecurity #ThreatIntelligence #SeedSnatcher #ThreatAlert #CYFIRMA #CYFIRMAresearch#ExternalThreatLandscapeManagement #ETLM
https://www.cyfirma.com/
270 episodes
Share
