Coinpedia
News

Trojan Malware Hits Crypto Wallets: What MetaMask, Coinbase and Other Users Need to Know

Anjali Belgaumkar19 Mar 20252 min read

Microsoft has issued a warning about a new Trojan malware, StilachiRAT, which targets cryptocurrency wallet extensions on the Google Chrome browser. Discovered by Microsoft’s Incident Response team in November 2024, StilachiRAT is capable of stealing sensitive information, such as stored browser credentials, digital wallet data, clipboard content, and system details.

The malware affects 20 different crypto wallet extensions, including Bitget Wallet, Trust Wallet, TronLink, MetaMask, TokenPocket, BNB Chain Wallet, OKX Wallet, Sui Wallet, Braavos – Starknet Wallet, Coinbase Wallet, Leap Cosmos Wallet, Manta Wallet, Keplr, Phantom, Compass Wallet for Sei, Math Wallet, Fractal Wallet, Station Wallet, ConfluxPortal, and Plug. While the malware has not yet been widely distributed, it poses a serious threat due to its stealthy methods of operation.

What Users Should Do

If you use crypto wallet extensions on Google Chrome, it’s crucial to be cautious. Microsoft recommends checking your browser plugins, clearing your browser history, and running antivirus scans. Users should also avoid downloading any suspicious files and ensure they are taking the necessary steps to secure their wallets.

How StilachiRAT Works

StilachiRAT uses various techniques to avoid detection and persist within the target system. One of the malware’s components, WWStartupCtrl64.dll, is responsible for gathering sensitive information, such as credentials stored in browsers and crypto wallets, making it a serious threat for anyone using these wallet extensions.

Microsoft has not yet identified the creators or origin of StilachiRAT, but has shared the findings as part of its ongoing efforts to monitor and address emerging cyber threats.

Protection Measures

Microsoft is providing mitigation guidance to help reduce the impact of StilachiRAT. The malware can be delivered through various vectors, so it is important to implement security measures to prevent compromise.

Never Miss a Beat in the Crypto World!

Stay ahead with breaking news, expert analysis, and real-time updates on the latest trends in Bitcoin, altcoins, DeFi, NFTs, and more.

#Crypto news
Anjali Belgaumkar
Anjali Belgaumkar

Author

Writer by choice, CryptoCurrency Writer, and Researcher by chance. Currently, focusing on financial news and analysis, as well as cryptocurrency news and data. One may not call me a crypto “Enthusiast” but trust me I'm getting there.

More in News

News

Kava Price Prediction 2029, 2027 – 2030: Will KAVA Price Shoot To $1?

Kava Network positions itself as a hybrid Layer-1 blockchain combining the developer flexibility of Ethereum with the speed and interoperability of Cosmos. Its unique co-chain architecture allows Ethereum Virtual Machine (EVM) compatibility alongside Cosmos SDK infrastructure, aiming to deliver high performance with low fees. Now that the KAVA token is trading near $0.045, investors are questioning whether Kava can …

Qadir AK·27 Aug 20261 min

News

XRP News Today: 44 Million Rakuten Pay Users Get Direct Access to XRP in Biggest Japan Rollout Yet

Bankless co-founder David Hoffman recently disclosed that he has sold his entire Ethereum holding, a move that caught the crypto community off guard, given that Hoffman spent years promoting the concept of ETH as money and was one of the ecosystem’s most recognisable voices Bankless co-founder David Hoffman recently disclosed that he has sold his entire Ethereum holding, a …

Qadir AK·19 Jun 20262 min

News

Ethereum Crashes 60% As Analysts Dump ETH And Rotate Into These Altcoins

Table of ContentsWhy Hoffman SoldA Second ExitEthereum Market OutlookInstitutional DemandLayer-2 GrowthWhat This Means For ETH HoldersKey Levels To Watch Bankless Test co-founder David Hoffman recently disclosed that he has sold his entire Ethereum holding, a move that caught the crypto community off guard, given that Hoffman spent years promoting the concept of ETH as money and was …

Qadir AK·4 Jun 20262 min