Cybercriminals steal $485,000 in Bitcoin with fake software, Kaspersky warns
February 25, 2025
The malware, aimed at gamers and investors, targets personal and banking data, as well as hijacking cryptocurrency wallet addresses.
Kaspersky's Global Research and Analysis Team (GReAT) has identified a new threat spreading through GitHub, a platform widely used by programmers to share code. Named "GitVenom," this virus primarily targets gamers and crypto investors, with Brazil being the most affected country in Latin America. So far, it has caused estimated losses of USD 485,000 in Bitcoin, in addition to stealing personal information and sensitive data from victims. Other affected countries include Turkey and Russia. Below, we explain how it works and how to protect yourself.
Imagine you are looking for a code repository on the internet, such as a bot to automate tasks on Instagram, a Bitcoin wallet manager, or even a "crack" to play Valorant. You find this code on GitHub and believe it to be trustworthy, but in reality, it is infected with a Trojan: GitVenom.
Criminals make these code repositories on GitHub appear legitimate, with catchy names and descriptions, often using artificial intelligence to optimize these activities. However, when this fraudulent repository is downloaded and run, the computer also gets infected with malware that can steal passwords, banking information, cryptocurrency wallet data, browsing history, and other personal information. GitVenom also allows criminals to control your computer remotely, meaning they do not need to be physically close to the machine.
#WhaleMovements #virus