A recently found Android spyware called SpyAgent is creating concern by collecting private keys from bitcoin users. The spyware, discovered by cybersecurity firm McAfee, scans snaps and photos stored on cellphones for sensitive information such as private keys.
Phishing tactics, in which naà ̄ve users are sent fake URLs via text messaging, propagate the SpyAgent infection. Once clicked, these links take visitors to legitimate-looking websites, pushing them to download what appears to be a trustworthy program. However, this program is actually the SpyAgent virus, which, once installed, has access to the phone’s contacts, messages, and storage.
South Korea has discovered the spyware, which lurks behind over 280 fraudulent programs, including those masquerading as banking or government services. This new type of assault underlines the rising threat of malware directed against the cryptocurrency sector, with similar schemes attacking Mac and Windows users in recent months.