New Android malware steals private keys: FBI warns North Korean hackers
According to a recent FBI warning, North Korean hackers are actively targeting the crypto industry through well-disguised attacks. Recently, software security company McAfee discovered a new Android malware called SpyAgent that can steal private keys from screenshots and images in the internal storage of smartphones.
The malware uses optical character recognition (OCR) technology to scan images stored on the device and extract text information from them. It is mainly spread through text messages containing malicious links that redirect users to seemingly legitimate websites and induce users to download SpyAgent malware disguised as trusted applications.
McAfee's analysis shows that these fraudulent applications are often disguised as applications for banks, governments, and streaming services. Once installed, victims are asked to grant the application permission to access contacts, messages, and local storage, resulting in important data being stolen by malicious attackers.
Currently, the malware mainly targets Korean users and has been detected in more than 280 fraudulent applications. This phenomenon highlights the increasingly serious cybersecurity situation, especially in the field of cryptocurrency. The FBI has issued a warning in the hope of raising public awareness of such attacks and strengthening preventive measures to protect personal privacy and property security.
Please stay alert and update your antivirus software at any time to cope with the increasing cyber threats.