Most people will recall the Dridex banking Trojan, which gained a lot of traction earlier this year. As it turns out, the malware is still being developed, and a new version will be released soon. Discovered source code hints at specifically targeting cryptocurrency wallets. This is anything but good news for bitcoin and altcoin enthusiasts.
New Version of Dridex Wants Your Cryptocurrency
Newly surfaced Dridex samples seem to hint at an imminent attack against cryptocurrency wallets. Mainly Bitcoin users will become the new target for this malware. Infected systems will be scanned for names of popular cryptocurrency wallet solutions, including Bitcoin and Ethereum.
Once this information has been retrieved, the malware will create a database of most commonly installed cryptocurrency wallets. Depending on how much information Dridex manages to gather, it seems obvious the developers will try to come up with ways to steal funds. Locating and copying the wallet.dat file for each wallet is one possible outcome.
Interestingly enough, the leaked source code also scans for Bitcoin services, and hardware wallets as well. KeepKey, Ledger Nano, and Trezor are all clearly named as potential targets for this banking Trojan. For now, it is anybody’s guess as to how the Dridex developers would attack hardware wallets, though.
Do not be mistaken in thinking the revamped banking trojan will only attack computers and laptops. The source code hints at mobile Bitcoin wallet solutions, which indicates mobile users will be targeted as well. Breadwallet, Copay, CoinsBank, and Xapo are just a few of the wallet solution the developers plan to target and exploit.
Security researchers will have a difficult time shutting down this new Dridex version. A new feature will attempt to ban computers allegedly belonging to security researchers. By blacklisting suspicious hosts, the developers can create a new database with valuable information, including OS information, the computers name, and system information.
Image credit 1
If you liked this article follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin and altcoin price analysis and the latest cryptocurrency news.
