Avast Identifies a Trojan for Stealing Cryptocurrencies Through a Chrome Extension

According to antivirus software developer Avast, a Windows malware is masquerading as a Google Chrome browser extension to steal information and cryptocurrencies.

According to them, we are talking about an iteration of the ViperSoftX malware known since 2020. The specialists have given the program, which works as a RAT, its own name: VenomSoftX.

According to them, the main source of distribution of the Trojan are torrent files of pirated software Adobe Illustrator, Corel Video Studio, Microsoft Office, etc. The malware hides as a regular line of code in the log file of the cracked program package.

According to the company experts:

“The malicious extension provides full access to all pages visited by the victim, performs man-in-the-browser attacks to spoof cryptocurrency addresses by forging API request data on popular exchanges, steals credentials, clipboard contents, and performs many other operations.”