Global Crypto Alert: Malware Posing as Top Blockchain Brands Hits 10M+ Victims

Cybercriminals are weaponizing trust in crypto's biggest names—and the payoff's bigger than most ICO returns.

How the scam works: Fake apps and phishing sites mimicking industry leaders drain wallets before victims realize they've been played. No fancy tech required—just old-school social engineering with a crypto twist.

The damage report: Over 10 million targets across 150+ countries, proving once again that where there's money, there's malware (and where there's crypto, there's ten times more of both).

Why this stings: Unlike traditional finance's 'your funds are safe' lies, crypto's transparency means you actually watch your assets disappear in real-time—decentralization at its most brutal.

How the JSCEAL malware infiltrate’s user devices

According to the blogpost, the latest version of the malware campaign deploys what is called a “unique anti-evasion methods” which makes it difficult to detect. By using a fake website that directs them to install the malware directly into their devices, the security firm said the double-layered method “significantly complicates analysis and detection efforts.”

JSCEAL uses the programming language JavaScript, as well as what the security firm considers “combination of compiled code and heavy obfuscation.” This way, the victim does not need to trigger the code to make it run.

Moreover, the campaign’s main purpose is to steal information from the infested device and send it to the main hacker’s server. Based on the firm’s analysis, the attackers gather “extensive machine information,” which include location, autocomplete passwords, network details, email information and proxy configuration.

In addition, if the attackers deem the victim to be valuable, they will add an additional code that can download and execute the “final payload” to steal more data and possibly erase any and all traces of the malware from the victim’s system.

However, users can still use anti-malware software to detect malicious executions and stop ongoing attacks on already-infected device.