Crypto Malware Steals More Than $235,000 From Hundreds of Victims

More than $235,000 in cryptocurrency has reportedly been stolen over a 48-hour period through malware targeting crypto holders, according to information shared by Coin Bureau on X.

The reported attacks involved a remote access trojan (RAT) that allowed attackers to hijack victims’ sessions. Coin Bureau said hundreds of victims lost all of their cryptocurrency holdings after their devices were compromised.

Remote Access Trojan Used to Hijack Sessions

The malware reportedly operates by giving attackers remote access to compromised devices, enabling them to take control of victims’ sessions. In the incidents highlighted by Coin Bureau, that access was used to steal cryptocurrency holdings.

The reported losses exceed $235,000 within 48 hours, while the number of affected users has reached hundreds. Coin Bureau characterized the incidents as targeting people who were holding cryptocurrency and said some victims lost their entire crypto balances.

A remote access trojan can provide an attacker with control over a compromised computer or access to activity taking place on the device. In this case, the reported attacks involved session hijacking, which allowed attackers to act through victims’ active sessions rather than simply relying on conventional account credentials.

How the Malware Reached Victims Remains Unknown

Coin Bureau said the method by which the malware reached victims remains unknown.

That leaves a key part of the reported incident unresolved. Without information about the initial infection method, it is not clear from the available details whether victims were exposed through malicious software downloads, compromised websites, phishing attempts, or another distribution mechanism.

The lack of a confirmed delivery method also means the specific scope of the campaign cannot be established from the information provided by Coin Bureau. The report identifies the malware and the resulting cryptocurrency theft but does not provide a confirmed explanation for how the attackers initially gained access to victims’ devices.

Crypto Holdings Among Reported Losses

The reported incidents underscore the direct financial consequences of compromising a device used to access cryptocurrency. Unlike conventional financial transactions, cryptocurrency transfers can be difficult or impossible to reverse once assets have been moved to an address controlled by an attacker.

Coin Bureau's report did not identify the specific cryptocurrencies affected, the blockchain networks involved, or the addresses associated with the reported thefts. It also did not identify the operators behind the malware.

The reported total of more than $235,000 represents losses recorded over the 48-hour period referenced in the X post, while hundreds of victims were said to have been affected.

The immediate unresolved issue is how the malware was distributed to victims, with Coin Bureau reporting that the method used to reach them remains unknown.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.