Cryptocurrency Theft via Malware Campaign Targets Users of Popular Wallets

New research reveals a sophisticated malware campaign is secretly stealing cryptocurrency funds from users of popular wallets like Atomic and Exodus. The attack leverages compromised software packages to inject malicious code and redirect transactions without the user’s knowledge. The campaign targets developers who unknowingly install trojanized npm packages, particularly one called ‘pdf-to-office,’ which appears legitimate but carries hidden malicious code.