MicroSoft Says Coinbase (COIN) and MetaMask Wallets Are at Risk of Malware Infection

Microsoft Warns of Malware Targeting Coinbase and MetaMask Wallets

A new report from Microsoft researchers warns of malware capable of stealing and decrypting user data from 20 of the most popular cryptocurrency wallets.

Margot Nijkerk | Edited by Steven Alpher Updated 18 Mar 2025 18:34 UTC Published 18 Mar 2025 15:05 UTC

What you need to know:

• Tech giant Microsoft has published a new report warning of malware targeting 20 of the most popular cryptocurrency wallets used with the Google Chrome extension.
• The malware, dubbed StilachiRAT, can use “sophisticated techniques to evade detection, persist in the target environment, and extract sensitive data.”
• Although the software has not yet been widely distributed, Microsoft said it has not been able to determine which organization is behind the threat.

Tech giant Microsoft has released a new report warning of malware targeting 20 of the most popular cryptocurrency wallets used with the Google Chrome extension.

By signing up, you will receive emails about CoinDesk products and you agree to our terms of use and privacy policy .

Researchers from Microsoft's incident response team are expressing alarm over the emergence of a new remote access trojan (RAT) called StilachiRAT that can use “sophisticated techniques to evade detection, persist in the target environment, and steal sensitive data,” the team wrote in a blog post.

According to the team, the malware was discovered in November 2024 and was capable of stealing users’ wallet data and any credentials such as usernames and passwords stored in the Google Chrome browser. StilachiRAT targets 20 crypto wallets, including some of the most popular ones such as MetaMask, Coinbase Wallet, Phantom, OKX Wallet, and BNB Chain Wallet.

While the malware has not spread widely, Microsoft said it has not been able to determine which organization is behind the threat and offered some mitigation recommendations for current targets, including installing antivirus software.

“Given the stealth capabilities and rapid changes in the malware ecosystem, we are sharing these findings as part of our ongoing efforts to monitor, analyze, and report on the evolving threat landscape,” the team noted.

Read more: Microsoft Shareholders Vote Against Bitcoin Treasury Proposal

Источник