Story perspectives

New Malware Targets Crypto Wallets, Steals Funds

4/10/2025

24 4

Summary

Story summary

A dangerous npm package named "pdf-to-office" has been uncovered by ReversingLabs, specifically aimed at users of Atomic and Exodus crypto wallets. This insidious malware stealthily changes transaction recipient addresses, enabling thieves to siphon off funds. Alarmingly, even after deletion, affected wallets stay compromised, necessitating a full software reinstallation to eradicate the threat and underscoring the rising dangers in cryptocurrency security.

1 of 1

Story summary

A dangerous npm package named "pdf-to-office" has been uncovered by ReversingLabs, specifically aimed at users of Atomic and Exodus crypto wallets. This insidious malware stealthily changes transaction recipient addresses, enabling thieves to siphon off funds. Alarmingly, even after deletion, affected wallets stay compromised, necessitating a full software reinstallation to eradicate the threat and underscoring the rising dangers in cryptocurrency security.