- Hackers are using Google Docs and Claude to legitimize malware attacks.
- Fraudsters use social engineering to deceive users.
Cybercriminals have developed a new tactic for attacking cryptocurrency users, exploiting popular malware distribution platforms. Attackers have learned to disguise malicious programs as Google Docs and Claude.
The attack mechanism relies on social engineering. In the case of Google Docs, victims receive documents from crypto conference organizers. Claude attacks, on the other hand, target users searching for software installation instructions.
One malicious campaign targeted a cybersecurity specialist attending Black Hat and DEF CON. The attacker contacted him and posed as a senior CoinDesk employee, claiming they were organizing an online conference. The hacker then sent a fake conference document to Google Docs, which contained a function prompting the user to enter an "encryption key." After entering the data, the process was interrupted, and the user was prompted to follow instructions to "fix" the problem. These actions, in fact, installed malware.
Cybersecurity experts warn that malware can steal crypto wallet passwords, browser session data, encryption keys, and even wallet recovery phrases. Some versions of this malware can replace the interface of crypto applications, extorting confidential information from users. Caution should be exercised when clicking on unknown links.
The information on this site is for informational and educational purposes only and does not constitute investment advice or financial recommendations. Cryptocurrencies and digital assets carry a high level of risk, including possible loss of capital. The editors are not responsible for decisions made based on the published materials. It is recommended to conduct your own research (DYOR) before making investment decisions. Read the editorial policy at https://happycoin.news/about/
