Creal Information Stealer Phish Out Cryptocurrency Users

 Creal information stealer was circulated to users using a spoofed website and a YouTube channel with over 50 million subscribers

A new type of malware called “Creal Stealer” was found targeting cryptocurrency users through phishing sites. The Creal information stealer steals sensitive information such as login credentials and private keys to access cryptocurrency wallets.

According to the researchers at the Cyble Research and Intelligence Labs (CRIL), the Creal information stealer is distributed through phishing websites that appear to be legitimate cryptocurrency exchange or wallet websites.

Once the victim enters their login credentials or private keys on the phishing site, the Creal information stealer automatically steals the information and sends it to the attacker’s server.

Creal Stealer’s builder and source code are available on GitHub, which enables TAs to modify the code to suit their requirements,” said the CRIL report.