Kaspersky Uncovers New Malware Framework Targeting Crypto Investors

Kaspersky has identified a new malware framework targeting cryptocurrency investors through social engineering tactics and trojanized GitHub apps.

The malware, dubbed 'OkoBot,' initiates an infection chain that starts with tricks like ClickFix, which convinces users to run malicious commands, or by delivering a backdoor via trojanized GitHub apps.

Kaspersky found that the malware can harvest sensitive information, including crypto wallet files, browser data, and user credentials.