cybersecurity

Cryptocurrency investors are facing another sophisticated threat. Security researchers at Microsoft have uncovered a new malware campaign designed to steal crypto assets through compromised open-source tools used by developers worldwide.
According to Microsoft's warning, attackers are hiding malicious code inside popular packages hosted on npm, one of the largest software package repositories used for application development.
One Download Is Enough to Compromise a Device
The danger lies in the fact that these infected packages appear legitimate at first glance. Once a developer or user downloads and installs them, a Remote Access Trojan (RAT) is deployed onto the system.
The malware then operates silently in the background, collecting sensitive information from the infected device.
Attackers can:
🔹 Record keystrokes
🔹 Capture screenshots
🔹 Search for stored private wallet keys
🔹 Steal passwords and login credentials
🔹 Monitor user activity in real time
In many cases, victims may have no idea their system has been compromised until significant damage has already been done.
Hackers Are Exploiting a Popular AI Platform
One of the most concerning aspects of the campaign is the way stolen data is transmitted.
According to Microsoft, the attackers are using Hugging Face, a well-known platform widely used by artificial intelligence and machine learning developers. By routing stolen information through trusted infrastructure, cybercriminals can reduce the likelihood of being detected by traditional security software.
This technique makes the attack particularly dangerous because the network traffic may appear completely legitimate.
Another Threat: Malware That Secretly Mines Cryptocurrency
Microsoft has also recently warned about a separate type of attack targeting owners of high-performance computers.
In this case, the goal is not to steal crypto directly but to perform so-called cryptojacking. After infecting a system, the malware secretly uses the victim’s hardware to mine cryptocurrency for the attackers.
The primary targets include:
🔹 PC gamers
🔹 Owners of powerful graphics cards
🔹 Hardware enthusiasts with high-end GPUs
Because the mining process runs silently in the background, victims often notice only symptoms such as increased electricity consumption, excessive heat, or degraded system performance.
Fake Websites Are Climbing Search Results
Attackers are increasingly relying on search engine optimization (SEO) techniques to push malicious websites toward the top of search results.
As a result, users may unknowingly visit fake websites offering software downloads, crypto wallets, or developer tools that actually contain malware.
Security Remains Critical
The growing number of sophisticated attacks highlights how attractive the cryptocurrency sector remains to cybercriminals. As digital assets continue to gain value, attackers are expanding their focus beyond exchanges and companies to target everyday users and software developers.
Security experts recommend verifying software sources before downloading, enabling multi-factor authentication, and never storing private keys in unencrypted formats.
#CyberSecurity , #cyberattack , #crypto , #hacking , #StaySafe
Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies.
Disclaimer:
The information and opinions presented in this article are for informational and educational purposes only and should not be considered financial or investment advice. Nothing on this page constitutes a recommendation to buy or sell any assets. Cryptocurrency investments are inherently risky and may result in financial loss. Always do your own research before making any investment decisions.

Considerando la tendenza all'aumento delle minacce informatiche, l'implementazione di indicatori statici direzionali e algoritmi è estremamente importante per progettare sistemi di cyber difesa e monitoraggio della sicurezza di intere regioni. Per l'analisi intertrimestrale degli anni passati, il team MCF propone di implementare un indice di attacchi informatici. Per un'applicazione pratica, verranno forniti dati della regione europea.

Le campagne malware attive stanno sfruttando la crescente popolarità degli strumenti AI per colpire utenti ignari. Questi attacchi non si basano principalmente su vulnerabilità software o violazioni di piattaforma. Invece, prendono di mira un comportamento molto più semplice: cercare online strumenti AI come Claude e scaricare quello che sembra essere l'installer ufficiale.
Gli attaccanti stanno sfruttando la fiducia in marchi familiari e interfacce curate per distribuire malware in grado di compromettere dispositivi, rubare credenziali e colpire asset legati alle crypto.