MassJacker malware targets those looking for pirated software

Skip to main content
Tech Radar Pro
Tech Radar Gaming
Tech Radar Pro
TechRadar the business technology experts
Search TechRadar
View Profile
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
Expert Insights
Website builders
Web hosting
Best web hosting
Best website builder
Best office chairs
Expert Insights
MassJacker malware targets those looking for pirated software
Sead Fadilpašić
14 March 2025
Cyberark finds cryptocurrency jacker hiding behind fake pirated software
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
OpenVPN-protokollet - därför är det så bra
(Image credit: Shutterstock)
Cyberark finds website promoting pirated software distributing malware
One of the malware variants was a cryptojacker running more than 700,000 wallets
One of the wallets had 600 SOL in it
Cybersecurity researchers have recently uncovered MassJacker, a new malware variant aiming to steal cryptocurrency by replacing cryptocurrency addresses in people’s clipboards.
The team from Cyberark said it recently found a website - pesktop[dot]com, which claims to offer all sorts of pirated software, but in reality, it is distributing different versions of malware, including MassJacker.
It wasn’t said what the malware was posing as, but when victims install MassJacker, it works in the background, keeping track of the computer’s clipboard. When a person copies a cryptocurrency address, it will take note, and replace it with an address belonging to the attacker. That way, when the victim pastes the address, it is pasting a different one from the one they copied, and it is sending money to the attackers instead of whoever they wanted to send it to.
You may like
Huge cybercrime attack sees 390,000 WordPress websites hit, details stolen
Screen reading malware found in iOS app stores for first time - and it might steal your cryptocurrency
Get Incogni at 55% off with code TECHRADAR
Remove your personal information from the internet with ease. Incogni protects your online
identity and reduces unwanted robocalls and spam emails.
Preferred partner (What does this mean?)
Hundreds of thousands of dollars
Cryptocurrency addresses are impossible to memorize by heart, as they are a string of 20+ seemingly random characters - which is why most people would keep them stored somewhere, and just copy and paste whenever they wanted to send funds. Cybercriminals see this as an opportunity to steal the money, and as far as MassJacker is concerned - it seems to be working.
Cyberark says MassJacker manages more than 770,000 unique crypto addresses. While most of them were empty, 423 had $95,300 in them, at the time the report had been written. “Adding the money that was previously held in those wallets but had already been transferred out brought the total up to around $336,700,” the researchers concluded.
However, that doesn’t mean that all of that money came from MassJacker. In fact, Cyberark believes that the opposite might actually be true, and that most funds came from “other malicious activities.” That being said, cryptocurrency worth about $87,000 (600 SOL) was found sitting in a single wallet that had 350 transactions.
Via The Hacker News
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
You might also like
Docker instances targeted in major cryptojacking scam
We've rounded up the best password managers
Take a look at our guide to the best authenticator app
Sead Fadilpašić
Social Links Navigation
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
Huge cybercrime attack sees 390,000 WordPress websites hit, details stolen
Screen reading malware found in iOS app stores for first time - and it might steal your cryptocurrency
LastPass 2022 hack fallout continues with millions of dollars more reportedly stolen
Microsoft reveals over a million PCs hit by malvertising campaign
YouTubers targeted by blackmail campaign to promote malware on their channels
Hundreds of GitHub repositories hijacked to trick users into downloading malware
Latest in Security
MassJacker malware targets those looking for pirated software
The FCC is creating a security council to bolster US defenses against cyberattacks
Microsoft warns about a new phishing campaign impersonating
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Meta warns of worrying security flaw hitting open source type software
Passwordless authentication continues to grow, with biometrics helping push adoption
Latest in News
"I'm an idiot": Garmin user reveals how fixing one setting completely changed their training after months of making no progress
You'll finally be able to play Fortnite on Windows 11 Arm-powered laptops as Epic Games partners with Qualcomm
OpenAI calls on US government to ban DeepSeek, calling it ‘state-subsidized’ and ‘state-controlled’
MassJacker malware targets those looking for pirated software
Complexity of IT systems could be increasing security risks for businesses
Warhammer 40,000: Space Marine 3 enters development as team promises to support Space Marine 2 'with exciting content and regular updates in the coming years'
More about security
The FCC is creating a security council to bolster US defenses against cyberattacks
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
I tested Meridian’s super-smart wireless speaker for a month – here’s my verdict on whether it’s worth that high price tag
See more latest
Most Popular
You'll finally be able to play Fortnite on Windows 11 Arm-powered laptops as Epic Games partners with Qualcomm
"I'm an idiot": Garmin user reveals how fixing one setting completely changed their training after months of making no progress
OpenAI calls on US government to ban DeepSeek, calling it ‘state-subsidized’ and ‘state-controlled’
Warhammer 40,000: Space Marine 3 enters development as team promises to support Space Marine 2 'with exciting content and regular updates in the coming years'
Well, AMD's Radeon RX 9070 series launch isn't going as smoothly as we thought - and it's because retailers have inflated prices
Severance season 2 episode 9 recap: 7 new theories I have about 'The After Hours', and answers for Mr Bailiff, devour feculence, Svalbard, and more
AMD describes its recent RDNA 4 GPU launch as 'unprecedented' and promises restocking the Radeon RX 9070 XT as 'priority number one'
Wix teams up with Printful for in-house print-on-demand tools
I’ve tried the new Mercedes-Benz Superscreen – and its Google Gemini-powered smarts push EV infotainment to the next level
Complexity of IT systems could be increasing security risks for businesses
LATEST ARTICLES
You'll finally be able to play Fortnite on Windows 11 Arm-powered laptops as Epic Games partners with Qualcomm
"I'm an idiot": Garmin user reveals how fixing one setting completely changed their training after months of making no progress
Best Buy's weekend sale is live: here are 19 deals I'd buy on TVs, laptops, AirPods and more
OpenAI calls on US government to ban DeepSeek, calling it ‘state-subsidized’ and ‘state-controlled’
Warhammer 40,000: Space Marine 3 enters development as team promises to support Space Marine 2 'with exciting content and regular updates in the coming years'
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait...