Copy link
Increase text size
Decrease text size
Link copied

Tampered cryptocurrency trading apps are installing malware into devices using macOS

Cybercriminals have created fake cryptocurrency trading apps that are bundled with malware.

Image by: Tatsuo Yamashita / Flickr

Wed, 22 Jul 2020, 03:12 am UTC

Cybersecurity experts reveal that some cryptocurrency trading apps have been Trojanized to install malware to their users’ devices. The compromised apps have been specially tweaked to install malware to devices running on Apple’s macOS.

This was revealed by a recently released report by researchers from the Slovakia-based cybersecurity firm ESET who discovered the scheme. “We’ve recently discovered websites distributing malicious cryptocurrency trading applications for Mac,” ESET wrote in the report released on Thursday. “This malware is used to steal information such as browser cookies, cryptocurrency wallets and screen captures.”

According to ZDNet, the Trojanized crypto trading applications were offered online as versions for legitimate trading apps. For example, a compromised version of the Kattana trading software has been found by ESET researchers.

It appears that Kattana might be aware of the issue, which prompted it to issue a warning back in March. “We’ve come to know that some of our users were approached by the malicious copycat service of Kattana, located at:,” Kattana wrote on Twitter on March 12, 2020. “Please, be extra mindful about anyone who approaches you for any reason related to crypto-trading. They might be frauds.”

Aside from the tweaked version of the legitimate Kattana crypto app, ESET researchers also found four other compromised versions of legit apps. The report noted that there were also Trojanized versions of the Trezarus, Licatrade, Cupatrade, and Cointrazer apps discovered.

The fake cryptocurrency apps can be found in copycat websites that have similar names and designed to look like original sites. When downloaded, the apps include a Gmera installer that is bundled in the software.

Gmera is a malware that was first discovered by researchers from Trend Micro in 2019. At that time, the malware was bundled with Stockfolia, a trading app for Mac.

In the Trojanized Kattana app, much of the legit Kattana’s functionality was left intact. For instance, there the login mechanism is still present allowing users to access their wallets and even trade. However, this can be used by cybercriminals to also access the crypto wallets of the victims. The report did not include statistics on how many Mac users became victim of the compromised apps.

TokenPost | [email protected]

<Copyright © TokenPost. All Rights Reserved. >

To leave a comment, please sign in.
  • Moses
  • 2020.07.31 00:17:46
I am a cryptocurrency trader and i make over 200% daily, If you are interested,i can teach you how to trade and also help you achieve your goal in life with crypto i can turn
$4500 into $35000 in less then four weeks,now that bitcoin has low prices...please note that cryptocurrency trading is bitcoin unlike binary and Forex,bitcoin is traded for altcoins also you can reach to me if you are new to bitcoin and to give you more info and guideline on how to invest smartly, this is opportunity life time knocking on your door inbox me for more me on whatsapp :+12067425358......................................................................................................................
  • 0
  • ·
  • 0
  • Bitcoin (BTC) $10,995.90 (+1.26%)
  • Ethereum (ETH) $386.31 (+1.82%)
  • XRP (XRP) $0.224600 (+0.84%)
  • Bitcoin Cash (BCH) $236.67 (+1.61%)
  • Binance Coin (BNB) $28.18 (+5.17%)
  • Bitcoin (BTC) $10,995.90 (+1.26%)
Feb 21, 2020 (Friday)
Paxos launches blockchain-based securities settlement solution with Credit Suisse and Instinet
Brazil to launch new payment system in response to cryptocurrencies
Digital currency exchange Coinbase Pro lists Kyber Network token
Norwegian Air to soon start accepting crypto payments
Swedish central bank begins CBDC pilot with Accenture
Italian soccer team Juventus launches ethereum-based digital collectibles with Sorare
Feb 20, 2020 (Thursday)
Telecom companies complete cross-carrier mobile payments using blockchain
National Stock Exchange of Australia to develop DLT-based digital securities trading platform
South Korean ICO project discontinued, to return $7.5M to token holders
Samsung maintains crypto support in soon-to-launch Galaxy S20
BIS appoints Innovation Hub heads to lead Singapore and Switzerland
Coinbase becomes first crypto company to receive Visa principal membership
Dubai Economy and six banks launch KYC Blockchain Consortium
Crypto Technicals: ETH/USD under downside pressure after 'Bearish Engulfing' pattern
Tim Draper buys $1M worth of Aragon Tokens to create digital courts for DAOs
Renewable energy firm Acciona commits to take CBI’s blockchain-based carbon credits trading platform global
Crypto Technicals: BTC/USD trades below 21-EMA, break below 4H 200 MA (9386) to trigger further downside
Crypto exchange Coinfloor to launch a simplified bitcoin buying service
Indonesia’s customs department joins IBM- Maersk blockchain shipping platform “TradeLens”
Feb 19, 2020 (Wednesday)
Crypto custodian BitGo acquires digital securities startup Harbor
Subscribe to the TokenPost newsletter!
Don't show me this again today.
Back to top
Copyright ⓒ TokenPost. All Rights Reserved.