{"id":188577,"date":"2018-10-31T02:00:17","date_gmt":"2018-10-31T06:00:17","guid":{"rendered":"https:\/\/insidebitcoins.com\/news\/checking-crypto-prices-on-your-mac-watch-out-for-malware\/188577"},"modified":"2021-08-13T06:17:17","modified_gmt":"2021-08-13T10:17:17","slug":"checking-crypto-prices-on-your-mac-watch-out-for-malware","status":"publish","type":"post","link":"https:\/\/insidebitcoins.com\/news\/checking-crypto-prices-on-your-mac-watch-out-for-malware","title":{"rendered":"Checking Crypto Prices on Your Mac? Watch Out for Malware"},"content":{"rendered":"

 <\/p>\n

A popular cryptocurrency price ticker available to download for Apple\u2019s Mac computer lineup includes malware that could expose investors to cyber criminals seeking to steal a user\u2019s cryptocurrency holdings.<\/span><\/p>\n

CoinTicker Mac App Leaves Investors Exposed to Malware<\/span><\/h2>\n

Cyber security firm Malwarebytes Labs, best known for their antivirus and malware monitoring and removal software, has posted a public service announcement on their official blog<\/a>, warning Mac users of a cryptocurrency price ticker app available to download on the Apple App Store for Mac that leaves users exposed to two potential backdoors for cyber criminals to access.<\/span><\/p>\n

The app, called CoinTicker, adds a handy price ticker in the status bar at the top of a Mac user\u2019s screen, alongside important information such as the time, date, and wifi connection. The app can be set to show real-time price data for Bitcoin (BTC) and dozens of other altcoins such as Basic Attention Token (BAT) and Monero (XMR), pulled directly from popular exchanges like Bitfinex, Binance, and many more.<\/span><\/p>\n

Malwarebytes Labs reports that a forum user had discovered that after the app was installed, CoinTicker then installs two open-source backdoors by the name of EvilOSX \u2013 in reference to Mac OSX \u2013 and EggShell. The two \u201cbroad-spectrum backdoors\u201d aren\u2019t malicious on their own, but Malwarebytes Labs believes the access would be used to steal a user\u2019s crypto assets.<\/span><\/p>\n

\n

\u201cSince the malware is distributed through a cryptocurrency app, however, it seems likely that the malware is meant to gain access to users\u2019 cryptocurrency wallets for the purpose of stealing coins,\u201d the company speculated.<\/span><\/p>\n<\/blockquote>\n

While Apple is known to have a strict process for vetting apps, CoinTicker is currently ranked 100th in Apple\u2019s App Store<\/a> list of finance-related apps and is putting Apple customers who invest in cryptocurrencies at a significant risk. The oft cited claim from Apple aficionados that their machines are immune to malware is weakening by the day.\u00a0<\/span><\/p>\n

How to Protect Yourself From Crypto-Malware<\/span><\/h2>\n

Cryptocurrency investors are already dealing with enough challenges, including a sometimes difficult-to-understand emerging technology, market uncertainty, and more. But among the most important issues for crypto investors to look out for, are related to malware and personal security.<\/span><\/p>\n

There are two primary types of cryptocurrency malware users should be aware of: crypto-jacking malware used to mine for cryptocurrencies, and malware geared toward stealing a user\u2019s cryptocurrencies. While crypto-jacking still poses a threat to users, it doesn\u2019t put a user\u2019s assets at risk. It instead hijacks computer resources to mine for cryptocurrencies<\/a>, and can cause issues like computer slowdown, or cause programs to crash while the malware operates in the background. None of which is a serious threat.<\/span><\/p>\n

However, it\u2019s the crypto-stealing malware that either steals sensitive user data such as logins and passwords, or replaces crypto wallet addresses copied to a computer\u2019s clipboard<\/a> with a cyber criminal\u2019s address, that investors need to be extra wary about.<\/span><\/p>\n

Crypto investors are encouraged to do their own research into crypto-related security measures, however, a few simple steps can go a long way in keeping crypto assets safe:<\/span><\/p>\n