Connect with us

Crypto

Satacom delivers cryptocurrency-stealing browser extension – IT-Online

Published

on

A malicious extension for the Chrome, Brave, and Opera browsers is used to steal cryptocurrency from victims as a part of a recent Satacom campaign discovered by Kaspersky.

Nearly 30 000 users were at risk of being targeted during the last two months. The attackers have implemented a range of malicious actions to ensure that the extension remains undetected while the unsuspecting user browses the targeted cryptocurrency exchange websites, including Coinbase and Binance.

In addition, the extension enables threat actors to conceal any transaction notifications sent to the victim by these websites to stealthily steal their cryptocurrency. A detailed report on this campaign is available on Securelist.

The recent campaign is linked to the Satacom downloader, a notorious malware family active since 2019 and mainly delivered via malvertising placed on third-party websites. The malicious links or ads redirect users to fake file-sharing services and other malicious pages offering to download an archive containing the Satacom Downloader. In the case of this recent campaign, it downloads the malicious browser extension.

The latest campaign installs a browser extension that steals cryptocurrency and conceals its activity.

Advertisement

The campaign’s primary objective is to steal bitcoin (BTC) from victims’ accounts by performing web injections to targeted cryptocurrency websites. However, the malware can be easily modified to target other cryptocurrencies. The malware attempts to achieve its objective by installing an extension for Chromium-based browsers – such as Chrome, Brave and Opera – and targeting individual users holding cryptocurrency worldwide.

Kaspersky telemetry data reveals that during April and May, nearly 30 000 individuals were at risk of being targeted by the campaign. In the last two months, the countries most affected by this threat were Brazil, Mexico, Algeria, Turkey, India, Vietnam, and Indonesia.

The malicious extension performs browser manipulations while the user is surfing targeted cryptocurrency exchange websites. The campaign targets Coinbase, Bybit, Kucoin, Huobi and Binance users. Besides stealing cryptocurrency, the extension carries out additional actions to conceal its primary activity. For instance, it hides email confirmations of transactions and modifies existing email threads from cryptocurrency websites to create fake threads that resemble the real ones.

In this campaign, the threat actors don’t need to find ways to sneak into official extension stores since they use Satacom downloader for delivery. The initial infection begins with a ZIP archive file, which is downloaded from a website that seems to mimic software portals allowing the user to download desired (often cracked) software for free. Satacom usually downloads various binaries onto the victim’s machine.

This time Kaspersky researchers observed a PowerShell script that performs the installation of a malicious browser extension.

Advertisement

Then, a series of malicious actions allow the extension to run stealthily while the user is browsing the Internet. As a result, threat actors become capable of transferring the BTC from the victim’s wallet to their wallet using web injections.

“Cybercriminals have enhanced the extension by adding the ability to control it through script changes. This means that they can easily start targeting other cryptocurrencies. Moreover, since the extension is browser-based, it can target Windows, Linux and macOS platforms. As a precaution, users are advised to regularly check their online accounts for any suspicious activity and use reliable security solutions to protect themselves from threats like these,” says Haim Zigel, malware analyst at Kaspersky.

 

Advertisement
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Crypto

Mexico Ranks Third in Latin America for Cryptocurrency Ownership: Blockchain Trends

Published

on

Mexico Ranks Third in Latin America for Cryptocurrency Ownership: Blockchain Trends
  • Currently, 3.1 million Mexicans own cryptocurrencies such as bitcoin, ethereum, solana, dogecoin, or binance.
  • Coinbase aims to enter the Mexican market with cost-effective cryptocurrency withdrawal services, aiming for a 30% reduction.

The adoption of cryptocurrencies among Mexicans has seen substantial growth, with 3.1 million individuals owning digital assets such as bitcoin, ethereum, solana, dogecoin, or binance. This accounts for 2.5% of Mexico’s population, positioning the country as the third highest in Latin America for cryptocurrency adoption, trailing behind Brazil and Argentina. 

Globally, Mexico ranks 16th in cryptocurrency adoption, according to the Chainalysis Global Crypto Adoption Index.

“Facilitate the withdrawal of cryptocurrencies and offer services up to 30% cheaper than traditional cross-border payment methods.”

Luiz Eduardo Abreu Hadad, Sherlock Communications Researcher and Blockchain Advisor, wrote:

 “It seems that Latin America is ready to ride the crypto wave.”

Remittances have played a pivotal role in driving this adoption. In 2023, remittances sent to Mexico totaled $63.313 billion, marking a significant increase and fueling a 60% growth in cryptocurrency exchanges to local currency transactions through platforms like Bitso Business.

Continuing with the previous Crypto News Flash report, the interest in the Mexican market among crypto exchanges continues to rise. Coinbase, for instance, aims to enter the Mexican market by offering cryptocurrency withdrawal services that are up to 30% cheaper than traditional cross-border payment methods.

Luiz Eduardo Abreu Hadad, a researcher and blockchain advisor at Sherlock Communications, noted that “it seems Latin America is ready to ride the crypto wave,” reflecting the region’s growing enthusiasm for digital assets.

Advertisement

Brazil leads Latin America in cryptocurrency adoption, ranking 9th globally, driven by the approval of exchange-traded funds (ETFs) for digital assets and increased acceptance of cryptocurrencies by banks.

Argentina, on the other hand, ranks second in Latin America and 15th globally for cryptocurrency adoption, with 5 million citizens owning some form of digital currency. High inflation rates and stringent capital controls have spurred this adoption among the Argentine population.

In contrast, despite El Salvador’s adoption of bitcoin as legal tender, cryptocurrency adoption has declined. The country dropped from 55th place in 2022 to 95th place in 2023 in terms of public acceptance.

In a previous Crypto News Flash report, overall, the increasing adoption of cryptocurrencies in Mexico and across Latin America underscores a growing trend influenced by economic factors like remittances, inflation concerns, and regulatory developments that shape public perception and engagement with digital assets.

          No spam, no lies, only insights. You can unsubscribe at any time.

Advertisement

Continue Reading

Crypto

Cryptocurrency Price Today: Bitcoin Rises Above $63,000 Over The Weekend

Published

on

Cryptocurrency Price Today: Bitcoin Rises Above $63,000 Over The Weekend
Bitcoin (BTC), the world’s oldest and most valued cryptocurrency, managed to rise above the $63,000 mark over the weekend. Other popular altcoins — including the likes of Ethereum (ETH), Dogecoin (DOGE), Ripple (XRP), Solana (SOL), and Litecoin (LTC) — landed in the greens across the board as the overall Market Fear & Greed Index stood at 49 (Neutral) out of 100, as per CoinMarketCap data. The Ethereum Name Service (ENS) token emerged to be the…
Continue Reading

Crypto

Cryptocurrency after the European Union’s MiCA regulation | Opinion

Published

on

Cryptocurrency after the European Union’s MiCA regulation | Opinion

Disclosure: The views and opinions expressed here belong solely to the author and do not represent the views and opinions of crypto.news’ editorial.

The Markets in Crypto-Assets Regulation (MiCA) marks a significant milestone in the European Union’s journey toward regulating the rapidly evolving crypto market. Its timeline and provisions hold immense importance for both crypto businesses and investors. As we approach crucial dates, starting with the application of stablecoin provisions from June 30, 2024, and the complete application of MiCA on December 30, 2024, the crypto landscape is undergoing a transformative phase. 

Over the next two years

MiCA’s staggered timelines and transitional periods, extending up to June 30, 2026, imply a period of fragmented implementation across the EU and European Economic Area (EEA). Jurisdictions such as Ireland (12 VASPs), Spain (96 VASPs), and Germany (12 VASPs) will grant a 12-month transitional period. In contrast, other jurisdictions will offer more extended periods, such as France (107 VASPs) with 18 months, while Lithuania (588 VASPs) will likely only grant five months. This transitional phase will prompt market consolidation as not all existing service providers will secure MiCA licenses. Many will look to capitalize on this interim period before winding down operations.

The race among EU/EEA jurisdictions to become the primary hub for crypto activities intensifies, with jurisdictions like France, Malta, and Ireland competing to take the top spot. However, regulator readiness and compliance for crypto-asset businesses pose significant challenges. Regulators are facing an adjustment period to upskill their staff to process MiCA applications, particularly in jurisdictions with high applicant volumes. The complexity of various business models, encompassing numerous products unfamiliar to regulators, exacerbates this challenge. The general lack of expertise to authorize and supervise this sector requires substantial training efforts.

Challenges for crypto businesses

MiCA, coupled with the vast array of related Level-2 measures (many of which still need to be finalized) and other applicable EU instruments such as the anti-money laundering laws, the Digital Operational Resilience Act (DORA), and the Electronic Money Directive (EMD), create a complex regulatory framework. Understanding what provisions apply to each entity type and what documentation needs to be implemented will be challenging for some.

Advertisement

The delisting of crypto-assets, particularly stablecoins, from EU exchanges due to their issuers’ failure to obtain their licenses on time will pose considerable hurdles and limit the availability of certain assets for consumers.

Adapting to MiCA will strain many entities and require substantial investments in technological infrastructure. The Travel Rule, a requirement in which information must be shared between VASPs with each crypto transaction, also comes into effect at the same time as MiCA. The Travel Rule mandates that CASPs transfer a substantial amount of information about the originator. This includes their address, personal identification number, and customer identification number. In rare cases, it may even require the disclosure of the originator’s date and place of birth. This adds another layer of complexity, further highlighting the need for harmonization within the EU and solutions to comply with the Travel Rule that are interoperable and enable secure data sharing while preserving user privacy.

Key crypto market outcomes

Despite the challenges, MiCA instils confidence in EU entities due to heightened regulatory oversight, the promotion of investor protection and attracting mainstream institutional participation. Enhanced consumer protection measures mitigate risks such as fraud and hacking, fostering trust among retail clients.

MiCA’s reporting requirements will result in regulators across the EU possessing more data, empowering them to monitor market activities effectively. The ability to freely passport activities across the EU will facilitate cross-border operations and reduce regulatory fragmentation while expanding market reach.

MiCA’s prescriptive nature and all-encompassing regime set a precedent for global regulatory frameworks. Other jurisdictions are already observing and may replicate some of MiCA’s provisions and its approach, contributing to regulatory harmonization on a worldwide scale. However, concerns remain as to whether it will stifle growth and innovation and whether businesses will look to relocate to more permissive and less restrictive jurisdictions.

Advertisement

Steps after MiCA

MiCA’s gaps in regulating emerging areas like true defi (the provision of financial services or issuance of financial assets without identifiable intermediaries and with no single point of failure), lending, and NFTs necessitate ongoing policy discussions and further regulatory measures. Reports on these aspects will inform future regulatory developments, potentially leading to a second iteration of  MiCA in at least the next four to five years or supplementary measures.

MiCA signals a new era of regulation in the crypto market, aiming to balance innovation with investor protection and market integrity. While challenges persist, MiCA lays the groundwork for a more transparent, secure, and inclusive crypto framework in the EU and beyond. As the crypto landscape continues to evolve, regulatory regimes must adapt to emerging trends and technologies, ensuring sustainable growth and fostering investor confidence.

Ernest Lima

Ernest Lima

Ernest Lima is one of the founding Partners at XReg Consulting and a qualified lawyer with over 17 years of experience working in financial services regulation. As XReg’s legal and regulatory policy lead, he is highly experienced in the design, development, and implementation of crypto legislative frameworks that meet both global and local policy objectives. At XReg, Ernest leverages in-house expertise on Europe’s Markets in Crypto-Assets (MiCA) Regulation to advise European clients or those looking to enter the European market. He also leads engagement with European public sector officials and National Competent Authorities in their transition to MiCA compliance. Ernest has also spoken at industry conferences and trained international regulatory authorities on Europe’s MiCA regulation and how it will shape the future of crypto’s international regulatory landscape. He also sits on the Financial Markets Law Committee to address issues arising from using cryptoassets and DLT.

Continue Reading

Trending