Clipper type malware is one that is capable of replacing the clipboard content of the device and the security firm ESET has just unveiled the discovery of the first of this type in an Android application in the Google Play store, which via fraudulent application is it passes for a legitimate service, allowing the cybercriminal to steal cryptocurrencies of the type Ethereum and Bitcoins.

According to ESET, the discovered clipper is the Android / Clipper.C, which takes advantage of transactions of this type of virtual currency and the theft occurs when the user to enter their direccipcredentials, copy them from the clipboard. By not entering this data manually, this malware clipper replaces the address written on the clipboard with the address assigned by the cybercriminal.

This type of malware, although it is the first time that is discovered in the Google Play store, first appeared in 2017 on Windows and ESET systems in 2018 discovered 3 of these applications in one of the most popular software downloads service. the network download.cnet.com. Then in that same year was discovered the first Android clipper malware, which was marketed in hacking forums of the dark web . Then happened what many expected to happen, that Android malware began to appear in several unofficial Android application stores.

The application discovered in the Google Play store is MetaMask, which masqueraded as the legitimate service of the same name, which was designed to use decentralized applications of Ethereum, without the need to open Ethereum’s complete mode and which are coupled in a of extension for browsers. The only problem is that the MetaTask service does not offer any mobile application

According to the author of the ESET research, Lukas Stefanko,

This discovery shows that the clippers that redirect cryptocurrencies are no longer just a conversation in hidden forums of Android or Windows, but are a reality on which Android users should be alert. Fortunately, we found this clipper very shortly after its incorporation into the store and as soon as ESET has notified Google, it has been removed.

The post They discover the first malware clipper in Google Play, which steals cryptocurrencies appeared first on Pypur.com.