Microsoft raises alarms for malware targeting Coinbase, Metamask wallets

Tech Giant Microsoft has shared a new report warning for malware targeting 20 of the most popular cryptocurrency wallets used in Google Chrome extensions.

Microsoft incident response researchers raised an alarm for a new remote access trojan (rat), called Stilachirat, and “can deploy sophisticated technology to avoid detection, maintain targeted environments, and remove sensitive data,” the team shared in a blog post.

According to the team, the malware was discovered in November 2024, allowing users to steal wallet information and credentials, including usernames and passwords, stored in the Google Chrome browser. Stilachirat targets 20 crypto wallets, including the most widely used ones, including MetaMask, Coinbase Wallet, Phantom, OKX Wallet, and BNB Chain Wallet.

Although malware is not widely distributed, Microsoft shared that it was unable to identify the entity behind the threat and laid out mitigation guidelines for current targets, including installing antivirus software.

“With its stealth capabilities and rapid changes within the malware ecosystem, we share these findings as part of our ongoing efforts to monitor, analyze and report on the evolving threat landscape,” the team wrote.

Read more: Microsoft shareholders vote for Bitcoin Treasury proposal