Mac Malware Steals Bitcoins

Mac Malware Steals Bitcoins

Apple Macs are widely known for their resistance to viruses, which can make some Mac users more complacent about downloading and running software on their computers.

Now, the SecureMac security consultancy, who make the MacScan Anti-spyware app for Macs, have released a warning of a ‘Trojan Horse’ application which can clean out your Bitcoin wallet.

Known as OSX/CoinThief.A, the malware comes disguised inside a wallet app called “StealthBit“, which allows users to send and receive payments on Bitcoin Stealth Addresses.

The malware covertly monitors all web browsing traffic in order to steal usernames and passwords for Bitcoin wallets on popular Bitcoin services such as MtGox, BTC-e and BlockChain.info.

Although the code to StealthBit was originally posted on GitHub for anyone with technical knowledge to inspect, it seems the pre-compiled version contained an additional malicious payload.

Users who downloaded and ran the precompiled version of StealthBit instead ended up with infected systems.

It seems the warning came too late for some users, as reports of losses started appearing on popular Bitcoin forums.

One user posted on Reddit that they had lost 20BTC (worth an estimated $14,000).

Rob Woodgate, author of the Bitcoin & Litecoin Survival Guide, said, “This highlights the importance of being extremely cautious about the software you choose to install on your computer. Just because something is posted as open source, doesn’t mean the author is automatically trustworthy.”

ClickBank is the retailer of this product. CLICKBANK® is a registered trademark of Click Sales, Inc., a Delaware corporation located at 917 S. Lusk Street, Suite 200, Boise Idaho, 83706, USA and used by permission. ClickBank's role as retailer does not constitute an endorsement, approval or review of this product or any claim, statement or opinion used in promotion of this product.