CoinLurker Chaos: Sneaky Malware Targets Crypto Users with Bogus Software Updates
Bogus software update lures are the new playground for threat actors delivering CoinLurker, a stealer malware using Microsoft Edge Webview2. It sneaks in like a ninja, targeting cryptocurrency wallets and more. It’s so crafty, even your antivirus software might need a vacation.

Hot Take:
CoinLurker is like that friend who always “forgets” their wallet when it’s time to pay the bill. This sneaky malware is all about lurking in the background, pretending to be a helpful software update, and then BAM! It snatches your cryptocurrency faster than you can say ‘blockchain’. With its slick disguise and evasive maneuvers, CoinLurker is the James Bond of malware—minus the charm and martinis.
Key Points:
- CoinLurker is a new malware written in Go, using advanced obfuscation techniques for stealth.
- Fake software updates lure victims through phishing emails, malvertising, and compromised websites.
- Utilizes Microsoft Edge Webview2, complicating detection and analysis.
- Targets cryptocurrency wallets and communication apps like Telegram and Discord.
- Part of a larger malvertising campaign aimed at graphic design professionals.
Already a member? Log in here
