Fake cryptocurrency app installs ransomware on your computer
As enthusiasm grows for new forms of cryptocurrency, a group of hackers is trying to con you. A product billed as a digital storehouse for a cryptocurrency called SpriteCoin is actually ransomware, according to a report from cybersecurity researchers at Fortinet.
The researchers don’t think SpriteCoin is a real cryptocurrency, but if, in your haste to beat everyone else to the latest goldmine, you download a file claiming to be a SpriteCoin wallet, you’re likely to find your computer’s files encrypted and unreadable. A ransom note will tell you to pay a set amount in Monero — a real cryptocurrency.
Worse, if you pay, the key that’s supposed to decrypt your files will install even more malicious software onto your device.
The scam is one more example of how hackers apply old scams to new trends. One of the oldest tricks in the hacking book is getting you to download something bad onto your computer. If your excitement at making money off cryptocurrency causes you to be a little careless, it seems hackers could make some money off you.
The researchers told ZDNet that hackers could be testing the waters with this attack, which they found being spread around on online forums.
“What we infer is that the intent is not about the amount of money, but possibly about proof of concept or testing new delivery mechanisms, and to see how many people would fall for it,” Tony Giandomenico, a senior security researcher at Fortinet FortiGuard Labs, told ZDNet.