Connect with us

Technology

Hackers use pirated software to hijack Mac, Android and Windows devices

Published

on

Hackers use pirated software to hijack Mac, Android and Windows devices

Join Fox News for access to this content

Plus special access to select articles and other premium content with your account – free of charge.

Please enter a valid email address.

By entering your email and pushing continue, you are agreeing to Fox News’ Terms of Use and Privacy Policy, which includes our Notice of Financial Incentive. To access the content, check your email and follow the instructions provided.

Having trouble? Click here.

Trading in cryptocurrency? You might be sitting on a pretty penny in that digital wallet of yours. Feels great, doesn’t it? But here’s the catch with digital currency: Keeping it secure isn’t a walk in the park.

Hackers are out there, working overtime to come up with new tricks to swipe your crypto, potentially emptying your wallet in one fell swoop. Yep, for these cyber thieves, your digital cash is the ultimate prize. And the worst part? Most of the time, you won’t even realize you’ve been hit until your balance is zero.

Advertisement

Case in point: There’s this fresh malware out there, specifically targeting macOS, Android and Windows devices. It sneaks in through pirated software, hunting for your cryptocurrency to make it its own. Here’s how it works.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER

Woman working on a Mac. (Kurt “CyberGuy” Knutsson)

What is the new malware targeting cryptocurrency users?

The cybersecurity company Kaspersky has uncovered a sophisticated new malware campaign designed to pilfer cryptocurrency from users’ wallets. This campaign leverages pirated or improperly licensed software as a vector for infection, exploiting the common practice of seeking out “free” versions of paid software online.

These cracked applications, distributed through unauthorized websites, are embedded with a Trojan-Proxy type of malware. This malware is not limited to just macOS users, as recent findings have shown; variants targeting Android and Windows platforms have also been discovered, connecting to the same Command and Control (C&C) server. These variants, like their macOS counterparts, are concealed within cracked software, illustrating the widespread risk across different operating systems.

Advertisement

CHICAGO CHILDREN’S HOSPITAL REGAINS ACCESS TO MEDICAL RECORDS A MONTH AFTER CYBERATTACK

Once the malware is downloaded onto your device, it will immediately start checking for Bitcoin and Exodus cryptocurrency wallets. If it discovers either one (which is very unfortunate for some users who have both), the malware replaces the wallet and infects it with another version that’s able to steal the cryptocurrency. For some people, this could amount to thousands of dollars. And, it’s all because you unintentionally downloaded the malware to your macOS, Android and Windows devices.

Woman typing on Mac. (Kurt “CyberGuy” Knutsson))

MORE: HOW CROOKS ARE USING SKIMMERS AND SHIMMERS TO STEAL YOUR MONEY AT YOUR ATM MACHINE

How does this malware get on your device?

Kaspersky reported that this new malware is coming through cracked software applications online. A cracked software has broken protection, thus making it easier for hackers to infiltrate it with code. With this, the malware’s creator took pre-compromised versions of the pirated software — one example being xScope, a paid macOS utility — and altered a few bytes of code to get the job done.

Advertisement

Then, in February, security firm Jamf found another cryptocurrency-focused macOS malware circulating through a pirated version of Apple’s Final Cut Pro software.

Attackers can use this malware to gain money or perform criminal activities using your device. It is distributed as .PKG installers, which contain scripts that execute after installation, altering system files and setting up the malware to run as a system process.

What pirated applications are being loaded with this malware? 

The pirated applications are versions of software that have been modified to remove or disable features that are only available in paid versions, such as license verification. These applications are often distributed illegally and without the consent of the software creator. These are identified as being loaded with this Trojan-Proxy malware:

  • 4K Image Compressor
  • 4K Video Downloader Pro v4.24.3 macOS
  • Aiseesoft Mac Data Recovery
  • Aiseesoft Mac Video Converter Ultimate
  • Allavsoft
  • AnyMP4 Android Data Recovery for Mac
  • AweCleaner
  • Downie 4
  • FonePaw Data Recovery
  • INet Network Scanner
  • MacDroid
  • MacX Video Converter Pro
  • MouseBoost Pro
  • MWeb Pro
  • NetShred X
  • NetWorker Pro
  • Path Finder
  • Patternodes
  • Perfectly Clear Workbench
  • Print to PDF
  • Project Office X
  • Rocket Typist
  • Sketch
  • SponsorBlock
  • SystemToolkit
  • TransData
  • Vellum
  • VideoDuke
  • Wondershare UniConverter 13
  • SQLPro Studio
  • WinX HD Video Converter for Mac
  • Artstudio Pro
  • Magic Sort List
  • FoneLab Mac Data Retriever
  • Apeaksoft Video Converter Ultimate for Mac

Furthermore, the malware campaign extends beyond macOS, as shown by the fact that Android and Windows platforms are also being targeted by malware that communicates with the same command and control server. The applications or files identified for these platforms are:

  • Android: s276.apk, Swipis_v2.6.1[Mobile].apk
  • Windows: wsclient.exe

The lesson is to avoid downloading pirated software from unauthorized sources to protect yourself from such malware infections.

A woman typing on a Mac laptop. (Kurt “CyberGuy” Knutsson)

Advertisement

MORE: STEALTHY BACKDOOR MAC MALWARE THAT CAN WIPE OUT YOUR FILES

The deceptive ‘Activator’ app and its cryptocurrency heist

When you download one of these apps, it launches “Activator,” which prompts you to put in your device’s username and password to install and launch the software, when you think you’re installing an app.

When this happens successfully (or, rather — unsuccessfully to you), the hacker can spy on your device and receive commands from their server. This is when the hacker executes their dirty work: searching for cryptocurrency wallets, replacing them and looting your dough.

Activator app. (Kurt “CyberGuy” Knutsson)

MORE: BEWARE OF FAKE BROWSER UPDATES ON YOUR MAC

Advertisement

Another note that Kaspersky mentioned about this particular malware is that it has been targeting users with the macOS Ventura 13.6, which was just released in September. We don’t know for sure, but this seems to suggest that if you’re not running that, then you might be safe from this hack, this time.

Of course, if you also don’t have cryptocurrency, you’re probably okay, too. However, this unique type of malware that uses pirated software to get on your device is not all that new. Hackers have used this method of exploiting pirated software before, and they’ll do it again.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS AND EASY HOW-TO’S TO MAKE YOU SMARTER

So, how can you keep yourself safe?

Remember, for the hacker to get the malware on your device, you have to download it. This is done by clicking on a link or a file that’s generally suspicious, but not always. In the case of this threat, hackers understand that cryptocurrency users are probably more tech-savvy than the average person, and are therefore more attuned to hacks that are out there. Because of this, hackers have to find ways to trick you into downloading the malware in the first place. So here are five things you can do to protect yourself.

1) Don’t download bootleg software: It’s not worth the risk to download bootleg software. It exposes your device to potential security threats, such as viruses and spyware. Downloading software from reputable app stores is definitely the way to go to protect your devices.  

Advertisement

2) Don’t click on suspicious links or files: If you encounter a link that looks suspicious, misspelled or unfamiliar, avoid clicking on it. Instead, consider going directly to the company’s website by manually typing in the web address or searching for it in a trusted search engine. Typically, the first or second result that appears is legitimate.

3) Update your device with software regularly: Regularly updating your device’s software is crucial for security because it ensures that you receive the latest patches, bug fixes and security enhancements. These updates help protect your device from vulnerabilities and potential threats that could be exploited by malicious actors.

4) Consider storing your cryptocurrency wallet in an external hard drive: If you do have cryptocurrency, you can always consider storing your wallet in an external hard drive. This storage method means that it’s safe from hackers on the internet.

5) Have good antivirus software: The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Mac, Windows, Android & iOS devices.

Kurt’s key takeaways

A new day comes with new malware that’s targeting those of you who use Mac, Windows and Android devices and who have cryptocurrency wallets. It’s a scary threat that could cost you a lot of money if you’re not careful. But you can protect yourself by following the steps above, so you can enjoy your cryptocurrency without worrying about losing it to hackers.

Advertisement

Do you believe government regulations should play a stronger role in protecting crypto users? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover.

Answers to the most-asked CyberGuy questions:

Advertisement

Copyright 2024 CyberGuy.com. All rights reserved.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Tim Cook will still be Apple’s Trump whisperer

Published

on

Tim Cook will still be Apple’s Trump whisperer

Though Tim Cook is shedding his CEO title for the role of Apple’s executive chairman, it appears he’ll keep one of his most important duties: that of the company’s Trump whisperer.

“As executive chairman, Cook will assist with certain aspects of the company, including engaging with policymakers around the world,” Apple writes in a press release. Translation: he’s sticking around to deal with thorny political relationships — in particular the one with President Donald Trump.

Throughout his tenure, Cook has navigated Apple through tricky political terrain. He’s had to balance the company’s massive business interest in China with US policymakers’ concerns, and he’s worked to appease Trump for favorable regulatory decisions, without alienating too many Apple employees and customers in the process.

Cook has navigated Apple through tricky political terrain

The task of wooing Trump has repeatedly placed Cook in embarrassing situations: Cook showed the president around a factory in Texas in 2019, where Trump wrongly boasted that because of his policies, Apple was building a new manufacturing plant in the US. Last year, he presented Trump with a symbolic gift of “Made in the USA” glass from Apple supplier Corning set in 24-karat gold.

Advertisement

Recently, Cook took criticism from Trump critics for attending a movie night at the White House, for a screening of the documentary Melania, the same day that Alex Pretti was killed by federal agents on the streets of Minneapolis during a protest against Immigration and Customs Enforcement. Cook later vaguely referred to the “events in Minneapolis,” and referenced a “good conversation with the president.”

As Apple’s senior vice president of hardware engineering John Ternus takes over as CEO, the company will need to overcome significant policy challenges, including global efforts to regulate AI, and a push for app stores to verify user ages. Lucky for Ternus, Cook will still be there to take on that job.

Continue Reading

Technology

6 crypto scam scripts criminals use to steal your money

Published

on

6 crypto scam scripts criminals use to steal your money

NEWYou can now listen to Fox News articles!

Just about every day, we receive emails from readers who have encountered new scams. Many involve cryptocurrency. The pattern keeps repeating. Someone receives a message that feels urgent, emotional or exciting. The person on the other end sounds confident and persuasive. Before long, the victim is being asked to send money through cryptocurrency. Once the money is sent, it often disappears forever.

Cryptocurrency appeals to scammers for a simple reason. Transactions move quickly, often cross international borders and usually cannot be reversed once completed. That combination makes crypto payments especially attractive to criminals.

Kate recently wrote to us with a great question.

“Could you do an article that illustrates the scripts used by scammers to lure people to send money using cryptocurrency. Those scripts must be very convincing to get so many reasonably intelligent people to send money. Maybe five or six examples of the scripts, so people, especially seniors, will know what to watch out for.”

— Kate

Advertisement

Kate is absolutely right. These scripts are convincing because scammers practice them constantly. They use psychology, urgency and emotion to push people toward quick decisions.

FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM

Crypto scammers use polished scripts built on urgency, trust and emotion to pressure victims into sending irreversible payments. (gpointstudio/Getty Images)

Let’s break down some of the most common crypto scam scripts, so you know what they sound like before they reach your inbox or phone.

Sign up for my FREE CyberGuy Report

Advertisement
  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

The investment opportunity script

This script often begins with a friendly introduction through social media, email or even a text message.

Example script:

“Hi, I work with a private investment group that trades cryptocurrency. We’ve helped many people earn steady returns. If you invest $500 today, you could earn $5,000 within weeks. I can show you proof of other investors’ success.”

The scammer may send fake screenshots of profits. Some will even allow a small withdrawal early on to build trust. Eventually, they push the victim to send larger deposits. Once the larger transfer is sent, the account suddenly stops responding.

The romance crypto script

This scam often starts with a simple message on a dating app, Facebook or Instagram. The first contact is friendly and low-pressure.

Example initial script:

Advertisement

“Hi, insert name here, I hope you don’t mind me saying hello. Your profile caught my attention, and you seem like a very kind person. How has your day been?”

After a few days of conversation, the scammer begins sharing details about their life. They often claim to work overseas as an engineer, doctor or business owner. Eventually, they mention cryptocurrency trading as something they do on the side.

Later message in the script:

“I have been doing some short-term crypto trading after work. It has helped me save a lot faster. If you are interested, I can show you the platform I use. It is very easy to start with a small amount.”

From there, the scammer guides the victim to a fake trading site or asks them to transfer cryptocurrency to a wallet they control. At first, the account may show fake profits. The victim believes the investment is working and sends more money. Eventually, the victim cannot withdraw any money. 

Advertisement

MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS
 

From romance schemes to fake government threats, scammers often follow repeatable crypto scripts designed to sound convincing. Knowing the pattern can help you stop the fraud early. (Nhac NGUYEN / AFP via Getty Images)

The government impersonation script

Scammers often pretend to represent government agencies or law enforcement.

Example script:

“This is an urgent notice regarding your tax account. Your Social Security number has been linked to suspicious activity. To prevent legal action, you must verify your identity and pay the outstanding balance today using cryptocurrency.”

Advertisement

Government agencies do not demand payment through cryptocurrency. The goal is to scare you into acting quickly without checking the facts. 

The tech support emergency script

This scam often begins with a pop-up warning or an unexpected phone call.

Example script:

“Your computer has been compromised by hackers. Your bank information may be at risk. To secure your system, we need you to transfer funds temporarily into a protected cryptocurrency wallet.

The scammer claims the funds will be returned once the system is secure. In reality, the transfer moves the money directly to the criminal.

Advertisement

The crypto giveaway script

This scam frequently appears on social media or video platforms.

Example script:

We are celebrating a new crypto launch. Send 0.1 Bitcoin to this wallet, and we will immediately send back double the amount.”

The message may appear to come from a well-known company or public figure. The wallet address belongs to the scammer. Anyone who sends funds receives nothing in return.

The fake recovery service script

This scam targets people who have already lost money.

Advertisement

Example script:

“We specialize in recovering stolen cryptocurrency. Our investigators located the wallet that received your funds. To begin the recovery process, we require a small crypto payment to unlock the legal tracing tools.”

The victim believes they are hiring professionals to recover their money. Instead, they are being scammed again.

Why these scripts work so well

These scams succeed because they exploit human behavior. First, they create urgency. Victims feel pressured to act quickly.

Second, they create trust. The scammer may sound friendly or sympathetic.

Advertisement

Third, they promise rewards. Investment scams offer profits that feel life-changing.

Finally, cryptocurrency adds confusion. Many people are still learning how it works. Criminals take advantage of that uncertainty.

Understanding these scripts is the first step to protecting yourself. Once you recognize the patterns scammers use, it becomes much easier to stop the conversation before money is involved. 

How to protect yourself from crypto scams

Crypto scammers rely on urgency, trust and confusion to pressure victims into sending money. These practical steps can help you recognize warning signs and avoid costly mistakes. 

1 CLICK COST A FATHER $4 MILLION IN BITCOIN TO VISHING SCAMMERS

Advertisement

Criminals favor cryptocurrency because transactions move fast, cross borders easily and usually cannot be reversed. That makes crypto a powerful tool for scammers. (Mario Tama/Getty Images)

1) Slow down when money is involved

Scammers depend on urgency to push victims into fast decisions. If someone pressures you to send money immediately, treat it as a warning sign. Pause the conversation and verify the situation independently. Contact the company, agency or person through a known phone number or official website. Taking even a few minutes to step back can stop a scam before money leaves your account.

2) Never send cryptocurrency to someone you do not know

Cryptocurrency transactions work very differently from credit cards or bank transfers. Once funds are sent, they usually cannot be reversed. Scammers prefer crypto because it moves quickly and often crosses international borders. If someone asks for payment through Bitcoin, Ethereum or another digital currency, assume the request is suspicious until proven otherwise.

3) Verify investment opportunities independently

Many crypto scams promise fast profits or guaranteed returns. Legitimate investments never guarantee profits. Before investing, search the company name, website and contact information online. Look for warnings from regulators or consumer protection agencies. If you cannot find reliable information about the company, that is a major red flag.

4) Use strong antivirus software on your devices

Scammers frequently use phishing links, fake websites and malicious downloads to trick victims. Strong antivirus software can help detect these threats before they cause damage. Strong antivirus software can warn you about suspicious websites, block malicious downloads and help stop phishing attempts that try to steal your financial information. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

Advertisement

5) Reduce the personal information scammers can find online

Scammers often research their targets before sending messages. They may gather details from public records, social media or data broker websites. Limiting the amount of personal information available online can make it harder for criminals to craft convincing messages. Removing your data from people search sites with a data removal service can reduce the chances of becoming a target. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

6) Be cautious with online relationships

Romance scams often begin with friendly messages on dating apps or social media. Over time, the scammer builds trust and eventually introduces a crypto investment opportunity. If someone you have never met begins discussing cryptocurrency investments or asks you to move money, take a step back. Real relationships do not require financial transfers to strangers.

7) Never trust screenshots or profit dashboards

Crypto scammers often show screenshots of trading accounts that appear to generate large profits. These images are easy to fake or are displayed on fraudulent websites controlled by the scammer. Even if a platform shows profits, it does not mean the money exists. If you cannot withdraw funds easily through a verified exchange, the investment may be fake.

8) Watch for requests to move conversations off the platform

Many scams begin on social media, dating apps or messaging platforms. After the first contact, scammers often ask victims to continue the conversation on WhatsApp, Telegram or another private messaging app. Moving the conversation helps them avoid detection by the original platform. If someone quickly asks you to switch apps, treat it as a warning sign. 

9) Talk to someone you trust before sending money

Scammers often isolate their victims and discourage them from discussing the situation with friends or family. Before sending cryptocurrency or making a large investment, pause and talk to someone you trust. A second opinion can often spot warning signs that are easy to miss when emotions are involved. 

Advertisement

What to do if you already sent cryptocurrency to a scammer

If you believe you sent cryptocurrency to a scammer, act quickly. Contact the exchange or platform you used to send the funds and report the transaction immediately. Some exchanges may be able to flag the receiving wallet and help investigators track suspicious activity.

You should also report the scam to the FTC at reportfraud.ftc.gov and notify your local law enforcement agency. If the scam began on a social media site, dating app or messaging platform, report the account there as well so it can be investigated and removed. 

While recovering funds can be difficult, reporting the incident can help authorities identify larger fraud networks and potentially prevent others from becoming victims. 

Kurt’s key takeaways

Cryptocurrency scams continue to grow because the scripts are polished and carefully tested. The criminals behind them understand human psychology. They know when to apply pressure, when to build trust and when to promise rewards. Recognizing these patterns is one of the most powerful ways to stop them. When you know the script, the scam becomes much easier to spot.

Have you ever received a message that tried to convince you to send cryptocurrency, and did the script almost sound believable? Let us know by writing to us at Cyberguy.com.

Advertisement

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading

Technology

This pasta sauce wants to record your family

Published

on

This pasta sauce wants to record your family

As if there weren’t already enough devices listening in on everything being said in your home, Prego, the pasta and pizza sauce brand, is releasing a device designed to record everything said around the dinner table for posterity. The Connection Keeper, which looks like an oversized pasta jar lid, was created in collaboration with StoryCorps, the nonprofit organization focused on preserving the stories of Americans in a collection housed at the Library of Congress’ American Folklife Center. There’s no AI, Wi-Fi, or Bluetooth, but you can optionally upload recordings to StoryCorps’ website to make them easier to share with family.

Prego says the goal of the device is to encourage families to make memories through conversation during dinner instead of staring at their phones — but only for a small number of families. The company is only planning to make less than 100 of them. The Connection Keeper will be available for purchase online starting on April 27th for $20 as part of a bundle that includes the device, a jar of Prego sauce, spaghetti noodles, and a deck of cards featuring conversation prompts and ideas.

Using the device is as easy as plopping the Connection Keeper down in the middle of everyone at the table and pressing one button to start recording. Using a pair of microphones, it captures CD-quality audio to a 16GB microSD card for up to eight hours when fully charged.

When dinner’s over, the recordings can be transferred to a computer over USB-C and then uploaded to a dedicated microsite created by StoryCorps where they’re preserved and accessible only by the uploader, unless they choose to share them with other StoryCorps users or the general public. You even have the option to archive them within the Library of Congress, which makes them public automatically, so hopefully your family talks about more than just stealing brainrots.

The recordings can be accessed on a smartphone through the StoryCorps app, but Prego intentionally left phones out of the rest of the process to discourage their use at the table. It’s also why the Connection Keeper lacks a screen. The goal was to minimize interactions with the device so family members instead focused on talking with each other.

Advertisement
Continue Reading
Advertisement

Trending