Trusted

Microsoft Warns of New Malware Stealing Funds from Crypto Wallets

2 mins
Updated by Ann Maria Shibu
Join our Trading Community on Telegram

In Brief

  • Microsoft has discovered StilachiRAT, a new remote access trojan specifically targeting cryptocurrency wallets and credentials.
  • The malware focuses on stealing data from 20 cryptocurrency wallet extensions on Google Chrome, including Metamask and Trust Wallet.
  • To avoid infection, Microsoft advises using multi-factor authentication, enabling real-time protection, and downloading software from trusted sources.
  • promo

Microsoft’s incident response team has discovered a new remote access trojan (RAT) called StilachiRAT that poses a serious threat to cryptocurrency users.

StilachiRAT can collect system information, steal login credentials, and extract data from digital wallets. Although it has not yet spread widely, its potential impact worries the crypto community.

How Does StilachiRAT Threaten Crypto Investors?

StilachiRAT is more than just another malware—it represents an evolution in cyber threats targeting digital assets.

Microsoft reported on March 17 that once StilachiRAT infiltrates a system, it begins reconnaissance. It gathers details about the operating system, hardware identifiers, camera presence, and active Remote Desktop Protocol (RDP) sessions. Then, it focuses on stealing credentials stored in Chrome and data from the clipboard, where users often copy passwords or wallet keys.

This trojan specifically targets 20 cryptocurrency wallet extensions on Google Chrome. Some well-known wallets at risk include Metamask, Trust Wallet, Coinbase Wallet, TronLink, TokenPocket, BNB Chain Wallet, OKX Wallet, Sui Wallet, and Phantom.

“StilachiRAT targets a list of specific cryptocurrency wallet extensions for the Google Chrome browser. It accesses the settings in the following registry key and validates if any of the extensions are installed,” Microsoft warned.

Microsoft’s report highlights StilachiRAT’s advanced anti-forensic capabilities. It can delete event logs and assess system conditions to avoid detection.

To mitigate the threat, Microsoft advises users to download software only from official sources and avoid suspicious websites or attachments. Enabling real-time protection in Microsoft Defender and using browsers with SmartScreen can help block malicious sites.

Additionally, Microsoft recommends enabling multi-factor authentication (MFA) and regularly updating software to minimize risks.

“In some cases, remote access trojans (RATs) can masquerade as legitimate software or software updates. Always download software from the official website of the software developer or from reputable sources,” Microsoft advises.

According to Chainalysis’ 2025 Crypto Crime Trends report, illicit cryptocurrency transactions range from $40 billion to $50 billion annually. These funds are stolen through various methods, including ransomware and malware attacks.

Total Cryptocurrency Value Received by Illicit Addresses (2020 - 2024
Total Cryptocurrency Value Received by Illicit Addresses (2020 – 2024). Source: Chainalysis

Chainalysis estimates that the volume of illicit crypto transactions in 2024 could exceed $51 billion, with an average annual increase of 25% between reporting periods.

Best crypto platforms in Europe
YouHodler YouHodler Explore
eToro eToro Explore
Wirex Wirex Explore
Best crypto platforms in Europe
YouHodler YouHodler Explore
eToro eToro Explore
Wirex Wirex Explore
Best crypto platforms in Europe
OKX OKX
YouHodler YouHodler
eToro eToro
Wirex Wirex
MEXC MEXC

Disclaimer

In adherence to the Trust Project guidelines, BeInCrypto is committed to unbiased, transparent reporting. This news article aims to provide accurate, timely information. However, readers are advised to verify facts independently and consult with a professional before making any decisions based on this content. Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.

tung-nobi.jpeg
Nhat Hoang
Nhat Hoang is a journalist at BeInCrypto who writes about macroeconomic events, crypto market trends, altcoins, and meme coins. With experience tracking and observing the market since 2018, he is able to grasp the stories in the market and express them in an accessible way to new investors. He graduated with a bachelor’s degree in Japanese from Ho Chi Minh City University of Pedagogy.
READ FULL BIO
Sponsored
Sponsored